Skip to content

Include polkit in systemd RPM package selection - #116

Merged
Jiri Appl (jiria) merged 1 commit into
aclmainfrom
jiria-polkit-permissions-investigation
Oct 19, 2026
Merged

Jiri Appl (jiria) merged 1 commit into
aclmainfrom
jiria-polkit-permissions-investigation

Conversation

@jiria

Copy link
Copy Markdown
Member

Summary

Explicitly select the polkit RPM alongside systemd so ACL RPM images include the PolicyKit daemon. The existing standalone sys-auth/polkit mapping only takes effect when that Portage package reaches catalog resolution; it does not independently request installation.

Change Log

  • Add polkit to the sys-apps/systemd RPM list in build_library/rpm/package_catalog.yaml.
  • Preserve the existing standalone polkit mapping; no resolver, package-source, or runtime configuration changes.

Type of Change

  • Image build change (base image, sysexts, OEM images)
  • Package/SPEC update
  • CI/automation change
  • SDK/toolchain update
  • Configuration change
  • Documentation update
  • Bug fix

Does this affect the image build?

  • Yes
  • No

Associated Issues

N/A.

Test Methodology

  • Test details:
    • python build_library/rpm/parse_catalog.py build_library/rpm/package_catalog.yaml — passed; the systemd entry includes polkit and the standalone polkit mapping is preserved.
    • source build_library/rpm/package_catalog.sh; get_rpm_package_name sys-apps/systemd — passed for BOARD=amd64-usr and BOARD=arm64-usr, each with BOOTLOADER_MODE=grub and BOOTLOADER_MODE=uki; assertions confirmed exactly one polkit entry. Native Python stdout line endings were normalized for the Windows/Git Bash check.
    • git diff --check — passed.
    • Full image build and kola tests were not run; runtime installation and activation of polkit in a rebuilt image remain to be validated.

Merge Checklist

All applicable boxes should be checked before merging

  • Image builds successfully with this change (or image build is not affected)
  • Any updated packages/SPECs build successfully
  • Relevant kola tests pass
  • All package sources are available
  • Source files have up-to-date hashes/manifests
  • Documentation has been updated to match any changes
  • Ready to merge

Select polkit explicitly with systemd so RPM images retain the PolicyKit daemon even when Portage dependency enumeration omits it.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Copilot-Session: deaf3826-2e46-4f65-8960-6449244e09f9
@jiria
Jiri Appl (jiria) requested a balanced review from Copilot October 19, 2026 15:29
@jiria
Jiri Appl (jiria) marked this pull request as ready for review October 19, 2026 15:29
@jiria
Jiri Appl (jiria) requested a review from a team as a code owner October 19, 2026 15:29

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Approval recommended

The narrow catalog change has no identified blocking issues, though full image and runtime validation remain outstanding.

No open issues 🎉

What changed in this PR

Ensures ACL RPM images explicitly include the PolicyKit daemon through systemd package selection.

Changes:

  • Adds polkit to the systemd RPM list.
  • Preserves the standalone polkit mapping without resolver or runtime configuration changes.
File Description
build_library/​rpm/​package_catalog.yaml Selects polkit alongside systemd.

Review effort: Balanced

@jiria
Jiri Appl (jiria) merged commit 7b4c05a into aclmain Oct 19, 2026
29 of 31 checks passed
@jiria
Jiri Appl (jiria) deleted the jiria-polkit-permissions-investigation branch October 19, 2026 21:22

This branch was successfully deployed

1 active deployment
development — 4ed9d829 Deployed Oct 19, 2026 by jiria via Check if we need to update the SDK #157
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants