#1111039 Upgrading a system installed with Debian live from Bookworm to Trixie does not change /etc/os-release due to dpkg diversion

Package:
src:live-build
Source:
src:live-build
Submitter:
Johannes Schauer Marin Rodrigues
Date:
2025-08-22 15:35:13 UTC
Severity:
normal
Tags:
#1111039#5
Date:
2025-08-13 20:27:03 UTC
From:
To:
Hi,

I'm letting this bug have RC severity because:

 - it interferes with files installed by another package (base-files) without
   coordination on actual user installations (not just during a live session)
 - the information "what release am i on" is a crucial part of what the OS
   should report correctly to the user (and to utilities querying the
   information)

I'm CC-ing Luca because the problem got introduced by this commit in
live-build:

https://salsa.debian.org/live-team/live-build/-/commit/24bfe093f82ccc134ab5d91fb4058ee0b52ec942

The commit is over a year old but the problem only showed now as users are
upgrading their installations that they made from a Debian Live CD from
Bookworm to Trixie.

The problem is this dpkg diversion:

mmmm@mmmm-linuxdummyvirt:~$ dpkg-divert --list | grep os-release
local diversion of /etc/os-release to /etc/os-release.debootstrap

According to the commit message the diversion is supposed to guard against
potential upgrades of base-files overwriting the contents of /etc/os-release
with its own contents. The problem is, that the calamares installer which can
be used from a Debian Live CD to permanently install Debian, creates a copy of
the Debian Live system and installs that to the disk. This includes the
diversion which was only meant for the live system itself.

There are multiple things to fix here:

 1. live-build itself should clean up the diversion after it is done installing
    (and potentially upgrading) the packages that end up on the live CD. The
    diversion is not useful anymore on the running Debian Live system itself.
    Once that is done, new installations made with Calamares will no longer
    include that diversion for the upgrade from Trixie to Forky.

 2. existing installations of Debian Bookworm that were made with Calamares
    from the Debian Live CD should somehow have the diversion cleaned up such
    that the contents of /etc/os-release after the upgrade reflect what
    base-files ships. Since a system installed from a Debian Live CD with
    calamares also installs the live-* packages, maybe a new upload of
    live-config or live-tools could contain a postinst maintainer script which
    performs the necessary magic?

Maybe the second part should be done quickly because there are a bunch of
users out there which are currently very confused by this issue:

 - https://www.reddit.com/r/debian/comments/1mmbjdh/old_etcosreleases_file_after_upgrading_to_debian/
 - https://www.reddit.com/r/debian/comments/1mmldrq/upgraded_to_debian_13_but_still_showing_as/
 - https://www.reddit.com/r/debian/comments/1moe5bz/trixie_upgrade_doesnt_upgrade_etcosrelease/

Unfortunately I don't have a reddit account, so I cannot be of further
assistance on that platform.

Thanks!

cheers, josch

#1111039#12
Date:
2025-08-13 21:03:37 UTC
From:
To:
This was meant to be applied only in the read-only portion of the live
image filesystem, as it contains image IDs that makes sense for an
immutable image to identify it, but not for an upgradable rootfs. If it
gets copied to an installed disk then something went wrong somewhere
and yeah it should be fixed.

I am not really familiar with calamares so not surprised I missed it,
if you know what to do would you be able to send a MR on Salsa to fix
it please?

#1111039#17
Date:
2025-08-13 22:24:33 UTC
From:
To:
Hi bluca,

The Bananas port of Debian to Apple Silicon [1] uses live-build to build
its OS images and is also affected by this. To give you an extra
pointer, we use the `--system normal` option to lb_config to build our
rootfs. That option is described as

```
defines if the resulting system image should be a live system or a
normal, non-live system
```

which implies the rootfs is upgradable. Another option which produces an
upgradable rootfs is `--debian-installer live`,

```
When live is chosen, [...] instead of installing the debian system from
packages from the medium or the network, it installs the live system to
the disk
```

Whatever solution is found to this bug, please keep in mind these two
options exist. I don't know if calamares uses the latter of if it uses a
completely different mechanism.

Cheers!


[1] https://wiki.debian.org/InstallingDebianOn/Apple/M1

#1111039#20
Date:
2025-08-14 06:12:36 UTC
From:
To:
Hi,
upgrades of base-files that happen *during* image creation?

If the diversion is somehow useful during image creation, the easiest fix might
be to just remove the diversion at the end of the image creation process. If
the diversion does not end up in the live system, then calamares cannot copy it
over.

Also: this is just addressing how to fix the problem going forward. The more
pressing fix (I think) is to think about how to fix existing installations
which have the wrong /etc/os-release because of this.

Somebody (and not me within the next few days because I'm attending my
brother's wedding on the weekend) would have to come up with a clever postinst
script to clean up the mess and then get that into the next point release and
hope that users uprade their Bookworm before upgrading to Trixie...

Thanks!

cheers, josch

#1111039#25
Date:
2025-08-14 08:30:00 UTC
From:
To:
On Thu, 14 Aug 2025 at 07:15, Johannes Schauer Marin Rodrigues <josch@debian.org> wrote:

Yes that's exactly it, so yes what you propose should be just fine.

#1111039#30
Date:
2025-08-14 09:33:32 UTC
From:
To:
needs to be deleted by the installer and replaced with a symlink when
copying to a persistent, writable rootfs as well. Is that code that
copies the rootfs in live-build or elsewhere?

#1111039#35
Date:
2025-08-14 09:42:48 UTC
From:
To:
Both Calamares and d-i use rsync to copy the content of
filesystem.squashfs to the installed system.

For forky (and hotfixing point releases) it would be possible to create
this diversion (or alternative) in a specifically crafted package (e.g.
live-hotfix-os-release) which could then be uninstalled in the final
steps of the installation (which currently already removes many
live-related packages).

With kind regards,
Roland Clobus

#1111039#40
Date:
2025-08-14 12:00:04 UTC
From:
To:
I see, do you have a pointer to where that code lives?
packages, who knows where they might end up... this is really a
workaround that is supposed to be for the image build only.

Besides, it's a generic problem, other image builders (eg: mkosi) also
write a local /etc/os-release as per specification, to add
image-specific metadata to it. So I think the correct fix here is for
the code that rsyncs to check if /etc/os-release is real file, and if
it contains the IMAGE_ID key, and if so delete it and add it back as a
symlink.

In the meanwhile I'll start with removing the diversion when the build
finishes: https://salsa.debian.org/live-team/live-build/-/merge_requests/437

#1111039#45
Date:
2025-08-14 14:48:15 UTC
From:
To:
This is not clever but does the job:

if dpkg-divert --list /etc/os-release | grep -q os-release.debootstrap; then
  dpkg-divert --quiet --local --remove --no-rename /etc/os-release
  rm -f /etc/os-release
  ln -s ../usr/lib/os-release /etc/os-release
fi

However, the main problem is where to have it - I just checked a
calamares installation, and there's no live-* packages unfortunately.

Is there any calamares-specific package that is installed in these rootfses?

#1111039#48
Date:
2025-08-14 15:04:56 UTC
From:
To:
Hi,

Quoting Luca Boccassi (2025-08-14 16:48:15)

thank you!

I cannot confirm. Did you install using calamares from a Debian Live CD of
Bookworm?

I have these live-* packages installed on my disk after installing from Debian
Live using Calamares:

live-boot, live-boot-doc, live-boot-initramfs-tools, live-config,
live-config-doc, live-config-systemd, live-task-base, live-task-gnome,
live-task-localisation, live-task-localisation-desktop, live-task-recommended,
live-tools

Thanks!

cheers, josch

#1111039#53
Date:
2025-08-14 15:06:49 UTC
From:
To:
On Thu, 14 Aug 2025 at 16:04, Johannes Schauer Marin Rodrigues <josch@debian.org> wrote:

No, it was trixie/stable from https://www.debian.org/CD/live/

#1111039#58
Date:
2025-08-14 16:54:55 UTC
From:
To:
Hello josch,

I'm quite amazed by this result. The live-* packages (and calamares)
should have been removed after installation.

Which image did you use, can you provide the URL?

The trixie-prerelease ISO GNOME image shows no such packages after
installing with Calamares, see:
https://openqa.debian.net/tests/429395#step/_collect_data/14

With kind regards,
Roland

#1111039#63
Date:
2025-08-14 17:28:17 UTC
From:
To:
I don't think it should be dealt with by live-build or calamares. As our
Bananas port shows, this bug may have propagated to unexpected use-cases
and gotten out of the control of both of them. Our users certainly
wouldn't receive the fix that way, as we don't use calamares as an
installer and uninstall all live-* packages. Regardless of how ugly it
may look, base-files itself may be the best place where to add the
postinst script.

#1111039#68
Date:
2025-08-14 17:55:44 UTC
From:
To:
Most definitely not base-files - if there really isn't any
live-related package left installed, I'll put it in
init-system-helpers - please double and triple check if there's
anything else that is live-related. Thanks

#1111039#73
Date:
2025-08-14 18:07:49 UTC
From:
To:
Would anyone be able to point me to where these rsync calls are made,
please? Tried looking around in live-build and couldn't find them.

#1111039#78
Date:
2025-08-14 18:54:22 UTC
From:
To:
One is in Calamares:
https://sources.debian.org/src/calamares/3.3.14-3/src/modules/unpackfs/main.py?hl=181#L181
The other one is somewhere in the d-i, I don't have a URL at hand at the
moment.

Here is the code to remove the live-related packages in d-i:
https://sources.debian.org/src/live-installer/58/finish-install.d/14remove-live-packages

With kind regards,
Roland

#1111039#83
Date:
2025-08-14 19:11:52 UTC
From:
To:
Is this 14remove-live-packages called also when calamares is in use,
given it removes calamares-settings-debian? If so I could add the
logic there

#1111039#93
Date:
2025-08-14 20:53:30 UTC
From:
To:
Confirmed, `dpkg -l '*live*' shows` we have no live-* packages installed
in any of our rootfs's, probably because they were never installed in
the first place: `lb config --system normal` does not create a
`config/package-lists/live.list.chroot`, which should be the package
list responsible for installing them in live systems.

Thanks!

#1111039#98
Date:
2025-08-14 21:41:03 UTC
From:
To:
This is now uploaded to unstable and also to trixie-p-u with unblock bug filed
#1111039#103
Date:
2025-08-14 21:42:21 UTC
From:
To:
Ok, and are we 100% sure that a workaround to fixup existing
installations via a package is actually needed? Given the remediation
is just:

dpkg-divert --quiet --local --remove --no-rename /etc/os-release; apt
install --reinstall base-files

#1111039#108
Date:
2025-08-14 21:50:54 UTC
From:
To:
If I were sure all our (Apple) users read the mailing list [1] and
no-one except for us was affected no, but it's quite unlikely for either
of these to be true. I answered one by one to (non Apple!) users I could
find on Reddit, but we can't chase them all.


[1] https://lists.debian.org/debian-arm-apple/2025/08/msg00010.html

#1111039#113
Date:
2025-08-14 22:41:52 UTC
From:
To:
Can someone review
https://salsa.debian.org/installer-team/live-installer/-/merge_requests/4
please - tested with the d-i live installer image and it does what it
says on the tin

#1111039#118
Date:
2025-08-15 00:10:00 UTC
From:
To:
And same for Calamares:

https://salsa.debian.org/live-team/calamares-settings-debian-packaging/-/merge_requests/6

Once these get a +1 I'll team upload them, and that together with the
already uploaded live-build changes fixes new images. Need to figure
out if we need p-u uploads of the d-i packages or not, not sure.

#1111039#123
Date:
2025-08-15 02:03:15 UTC
From:
To:
Stop



Chris Lavin
Chief Technology Officer
(321)279-4289 Cell
(561)828-6100 FAX
Chris.Lavin32707 Skype
CLavin@OneConnxt.com <mailto:CLavin@OneMediaCorpInc.com>

24/7 Operations Center
+1(305)696-4737 Direct













Please print only if necessary
This e-mail and any attachment are confidential and intended solely for the use of the individual to whom it is addressed. If you are not the intended recipient, please telephone or email the sender and delete this message and any attachment from your system. Unauthorized publication, use, dissemination, forwarding, printing or copying of this e-mail and its associated attachments is strictly prohibited.

#1111039#126
Date:
2025-08-15 17:35:31 UTC
From:
To:
Hello,

Bug #1111039 in live-boot reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below and you can check the diff of the fix at:

https://salsa.debian.org/live-team/live-boot/-/commit/e917e1fa6ae58496b86c2d875fbc112f949f5285
------------------------------------------------------------------------
Remove live-build's os-release on removal

Installers will remove live-boot from the installed rootfs if
they copy it from the livefs. This gives an opportunity to
adjust the rootfs for content that should not be copied
1:1 from the livefs.

Closes: #1111039
------------------------------------------------------------------------

(this message was generated automatically)
-- 
Greetings

https://bugs.debian.org/1111039

#1111039#133
Date:
2025-08-15 17:37:24 UTC
From:
To:
Jonathan suggested using live-boot.postrm instead of hooks in the
installer package, I've tested and it works with both flavours, so
I've uploaded live-boot now. I'll prep the same p-u update as well
shortly.

#1111039#138
Date:
2025-08-15 17:50:44 UTC
From:
To:
We believe that the bug you reported is fixed in the latest version of
live-boot, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1111039@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Luca Boccassi <bluca@debian.org> (supplier of updated live-boot package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Fri, 15 Aug 2025 17:18:52 +0100
Source: live-boot
Architecture: source
Version: 1:20250815
Distribution: unstable
Urgency: medium
Maintainer: Debian Live Maintainers <debian-live@lists.debian.org>
Changed-By: Luca Boccassi <bluca@debian.org>
Closes: 1111039
Changes:
 live-boot (1:20250815) unstable; urgency=medium
 .
   [ Roland Clobus ]
   * Don't verify with all checksum files
 .
   [ Luca Boccassi ]
   * Remove live-build's os-release on removal (Closes: #1111039)
Checksums-Sha1:
 a75aea2935b99c398cabb36ccf7932e2bb1d27d8 1867 live-boot_20250815.dsc
 4df152ce53bb164d88f31b708e27c3c1dae240f8 101308 live-boot_20250815.tar.xz
 441c17ed322076e594344edbd651fc7fdc31d461 6284 live-boot_20250815_source.buildinfo
Checksums-Sha256:
 53e0f1420c81963b621c046f7739fd2156d8a34f749f07a8a91dfd0918c6dc54 1867 live-boot_20250815.dsc
 6f6ac4729b9c25e72e82e6a50a89a7395eea12299376597d506bdee512237596 101308 live-boot_20250815.tar.xz
 71c6b727c409253c069b3f07a550893c77873669e97f45a94e992e67a013365e 6284 live-boot_20250815_source.buildinfo
Files:
 878514a7828c89b523a6c755b9dfcea7 1867 misc optional live-boot_20250815.dsc
 b7130b486e266694db65d0881e8e8b9d 101308 misc optional live-boot_20250815.tar.xz
 8eed895a1d21fd82b893d602f3c39e7b 6284 misc optional live-boot_20250815_source.buildinfo
-----BEGIN PGP SIGNATURE-----
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=8fLc
-----END PGP SIGNATURE-----

#1111039#149
Date:
2025-08-15 19:52:31 UTC
From:
To:
On Fri, 15 Aug 2025 18:37:24 +0100 Luca Boccassi <bluca@debian.org> wrote:
wrote:
wrote:
<rclobus@rclobus.nl> wrote:
are made,
find them.
https://sources.debian.org/src/calamares/3.3.14-3/src/modules/unpackfs/main.py?hl=181#L181
hand at the
https://sources.debian.org/src/live-installer/58/finish-install.d/14remove-live-packages
use,
the
https://salsa.debian.org/installer-team/live-installer/-/merge_requests/4
what it
https://salsa.debian.org/live-team/calamares-settings-debian-packaging/-/merge_requests/6
the
figure

Uploaded to unstable and trixie-p-u.

Unless someone has a better (actionable) idea, I'll put the following
postinst cleanup in init-system-helpers which is prio: essential so
it's guaranteed to clean up every install:

if [ "$1" = "configure" ] && [ -n "$2" ] && dpkg-divert --list /etc/os-release | grep -q os-release.debootstrap; then
    dpkg-divert --quiet --local --remove --no-rename /etc/os-release
    rm -f /etc/os-release
    ln -s ../usr/lib/os-release /etc/os-release
fi

and push that to p-u as well

#1111039#154
Date:
2025-08-15 20:59:19 UTC
From:
To:
Hi Luca,

Sgtm. If you need me to test something I'll be happy to help.

#1111039#159
Date:
2025-08-15 21:59:01 UTC
From:
To:
affects 1111039 unattended-upgrades
thanks

Luca Bocassi wrote:

Thanks a lot. For completeness, I'm adding the above affects because a
recent thread in debian-user:

https://lists.debian.org/debian-user/2025/08/msg00477.html

shows that this problem made unattended-upgrades not to work properly.

Thanks.

#1111039#164
Date:
2025-08-16 12:07:47 UTC
From:
To:
Hello,

Bug #1111039 in init-system-helpers reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below and you can check the diff of the fix at:

https://salsa.debian.org/debian/init-system-helpers/-/commit/61cf4dab05caffc1428d394dc34bec9a5916df43
------------------------------------------------------------------------
Add postinst to work around live-build issue on some systems

Needs to be somewhere that will be for sure installed,
but all the live-* packages get removed on install, so
there's nothing else. This is prio: essential so it's
guaranteed to be there to do the cleanup.
Can be dropped after Forky ships.

Closes: #1111039
------------------------------------------------------------------------

(this message was generated automatically)
-- 
Greetings

https://bugs.debian.org/1111039

#1111039#171
Date:
2025-08-16 12:22:22 UTC
From:
To:
We believe that the bug you reported is fixed in the latest version of
init-system-helpers, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1111039@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Luca Boccassi <bluca@debian.org> (supplier of updated init-system-helpers package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Fri, 15 Aug 2025 19:46:44 +0100
Source: init-system-helpers
Architecture: source
Version: 1.69
Distribution: unstable
Urgency: medium
Maintainer: Debian systemd Maintainers <pkg-systemd-maintainers@lists.alioth.debian.org>
Changed-By: Luca Boccassi <bluca@debian.org>
Closes: 1111039
Changes:
 init-system-helpers (1.69) unstable; urgency=medium
 .
   * Add postinst to hotfix an upgrade bug on certain newly live-installed
     systems built using Trixie's live-build (Closes: #1111039)
Checksums-Sha1:
 dc4475bca3daa705b569bf8b5de26c336d271911 2234 init-system-helpers_1.69.dsc
 86d2e3073791e0760c590428ad98cad4a5adf5a0 45648 init-system-helpers_1.69.tar.xz
 6b542b7a1e81019bb50f8e26920abf442541400d 6848 init-system-helpers_1.69_source.buildinfo
Checksums-Sha256:
 99b681c969728fba085226b1d1fd25cc37c9fe16f9eb5118e679d845b50ae7ee 2234 init-system-helpers_1.69.dsc
 e246ee7f39b110803e5307fdb25ec2fb5fe0c62dbd9274011803fef50af08100 45648 init-system-helpers_1.69.tar.xz
 17f567e0e540083e48253483eeaa16bcd654283284375553cc6807fc4a042bc9 6848 init-system-helpers_1.69_source.buildinfo
Files:
 137837f5540a0011abc1c8cda25ea5a9 2234 admin optional init-system-helpers_1.69.dsc
 7e3eacebd36c1f1a1ee9b58069c12573 45648 admin optional init-system-helpers_1.69.tar.xz
 e96d946e58355e390c9f9a1e1f1869af 6848 admin optional init-system-helpers_1.69_source.buildinfo
-----BEGIN PGP SIGNATURE-----
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=tb2t
-----END PGP SIGNATURE-----

#1111039#176
Date:
2025-08-16 12:09:28 UTC
From:
To:
Tested with both flavours of the live installer, seems to work fine,
uploaded to unstable. I'll let it be there for a day or two then do the
p-u dance as well.

#1111039#187
Date:
2025-08-20 14:18:39 UTC
From:
To:
the

Uploaded to p-u and unblock bugs all filed, so now it's in RT's hands,
both for accepting these packages and eventually rebuilding the live
installer images (next point release I imagine?)

#1111039#192
Date:
2025-08-20 18:15:54 UTC
From:
To:
Hi Luca!

Thanks a lot for the uploads! Shouldn't the fix in init-system-helpers be
uploaded to bookworm-pu too? Many users are going to update to trixie these
days and their bookworm rootfs may still contain the diverted os-release. I
mean, in theory any release could be affected, but bookworm is probably the
most exposed right now.

Cheers!

#1111039#197
Date:
2025-08-20 18:20:26 UTC
From:
To:
But the change that introduced the issue was added long after bookworm
was released? So the official bookworm installers should not be using
that?

#1111039#202
Date:
2025-08-20 18:43:55 UTC
From:
To:
You're probably right, but this bug was discovered because people had
issues upgrading from bookworm to trixie, which makes me think they're
possibly the largest affected group. Indeed, part of the initial bug
report asked for it to be fixed in bookworm.

#1111039#207
Date:
2025-08-20 18:46:12 UTC
From:
To:
But how's that possible? Where's the offending installer image?
#1111039#212
Date:
2025-08-20 18:52:49 UTC
From:
To:
oft yes the 12.11 image at
https://cdimage.debian.org/mirror/cdimage/archive/latest-oldstable-live/amd64/iso-hybrid/
does have the same issue, then I guess I don't understand how they are
built given that change was never in bookworm

#1111039#217
Date:
2025-08-20 19:37:11 UTC
From:
To:
I have no clue. In other cases [1] it may not even be the official
installer. Developers building images in testing when it was trixie may
have introduced the bug in rootfses of any past Debian release. Of
course it would be madness and probably useless to try and fix it in
all, but given the reports bookworm at least is probably needed.

Cheers!


[1] Like ours, but we are good with the uploads you already did. Thanks
again btw.

#1111039#220
Date:
2025-08-20 21:13:56 UTC
From:
To:
Hello,

Bug #1111039 in init-system-helpers reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below and you can check the diff of the fix at:

https://salsa.debian.org/debian/init-system-helpers/-/commit/2e77a3668fd3188de3016277fe66b066ecff0652
------------------------------------------------------------------------
Add postinst to work around live-build issue on some systems

Needs to be somewhere that will be for sure installed,
but all the live-* packages get removed on install, so
there's nothing else. This is prio: essential so it's
guaranteed to be there to do the cleanup.
Can be dropped after Forky ships.

Closes: #1111039
------------------------------------------------------------------------

(this message was generated automatically)
-- 
Greetings

https://bugs.debian.org/1111039

#1111039#229
Date:
2025-08-20 21:33:08 UTC
From:
To:
Uploaded to bookworm-p-u as well
#1111039#234
Date:
2025-08-20 21:47:42 UTC
From:
To:
Thank you!
#1111039#239
Date:
2025-08-22 07:01:43 UTC
From:
To:
Hi,

A short note, as I'm currently short on time:

* I've been a bit overwhelmed by the amount of messages in a relatively
short time frame, I'm struggling to keep up
* The official Debian live images are generated based on the status of
git on the date of their release
   * They are generated by the 'rebuild.sh' script [1]
   * That script takes the timestamp of the archive and finds a matching
version of live-build in git
   * All releases, including point releases use this, so stable and
oldstable point releases will have this bug
* Since live-build currently no longer has the diversion, upcoming point
releases will not have the diversion either
* Repairing the issue in live-boot does not help: the old, already
generated live images will not see that fix, and newer live images will
not need the fix
* I have not looked _why_ the diversion was present in live-build, so I
don't know yet whether there are side-effect during the build that
depend on the content of the modified file
* Bringing the fixes to backports are not technically required for
Debian, but derivatives which use the distributed version of live-*
packages might need it

With kind regards,
Roland

[1] https://wiki.debian.org/ReproducibleInstalls/LiveImages

#1111039#246
Date:
2025-08-22 09:20:38 UTC
From:
To:
It is needed but not a a workaround, please see the relevant commit
message for the explanation

Not everyone runs live-build from git, so updates to stable-p-u are needed

#1111039#251
Date:
2025-08-22 10:47:09 UTC
From:
To:
We believe that the bug you reported is fixed in the latest version of
init-system-helpers, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1111039@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Luca Boccassi <bluca@debian.org> (supplier of updated init-system-helpers package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Wed, 20 Aug 2025 14:39:01 +0100
Source: init-system-helpers
Architecture: source
Version: 1.69~deb13u1
Distribution: trixie
Urgency: medium
Maintainer: Debian systemd Maintainers <pkg-systemd-maintainers@lists.alioth.debian.org>
Changed-By: Luca Boccassi <bluca@debian.org>
Closes: 1111039
Changes:
 init-system-helpers (1.69~deb13u1) trixie; urgency=medium
 .
   * Upload to trixie
 .
 init-system-helpers (1.69) unstable; urgency=medium
 .
   * Add postinst to hotfix an upgrade bug on certain newly live-installed
     systems built using Trixie's live-build (Closes: #1111039)
Checksums-Sha1:
 b79c1fca08ca8c538a5967b46f9af5fd767308ae 2266 init-system-helpers_1.69~deb13u1.dsc
 a9f896dadb2cb3ac8fb63ceaf22a7908f3611d60 45852 init-system-helpers_1.69~deb13u1.tar.xz
 c059e5a22432537356e31de57405b145409d81ae 6882 init-system-helpers_1.69~deb13u1_source.buildinfo
Checksums-Sha256:
 873082d72727267b6207e38df47e3002aeb0ed554f876db17c7bbfeb26174ee6 2266 init-system-helpers_1.69~deb13u1.dsc
 bbd65c63420b6335b91cbf5daad9a70632a087657eb9078ea000f0a16c2d83da 45852 init-system-helpers_1.69~deb13u1.tar.xz
 62468f8a8d3d8fd39304c557ae8a8a616a03852469a39bd8162ccbfa84a501e2 6882 init-system-helpers_1.69~deb13u1_source.buildinfo
Files:
 647ebb996be88e9e6c6edf43e0c64144 2266 admin optional init-system-helpers_1.69~deb13u1.dsc
 e02d3f64bc6f881d9f24a21d694ddbca 45852 admin optional init-system-helpers_1.69~deb13u1.tar.xz
 72ce954ad96d782b0c128969ccd6c56b 6882 admin optional init-system-helpers_1.69~deb13u1_source.buildinfo
-----BEGIN PGP SIGNATURE-----
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=+k6e
-----END PGP SIGNATURE-----

#1111039#256
Date:
2025-08-22 10:47:10 UTC
From:
To:
We believe that the bug you reported is fixed in the latest version of
live-boot, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1111039@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Luca Boccassi <bluca@debian.org> (supplier of updated live-boot package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Fri, 15 Aug 2025 18:47:32 +0100
Source: live-boot
Architecture: source
Version: 1:20250815~deb13u1
Distribution: trixie
Urgency: medium
Maintainer: Debian Live Maintainers <debian-live@lists.debian.org>
Changed-By: Luca Boccassi <bluca@debian.org>
Closes: 1111039
Changes:
 live-boot (1:20250815~deb13u1) trixie; urgency=medium
 .
   * Upload to trixie
 .
 live-boot (1:20250815) unstable; urgency=medium
 .
   [ Roland Clobus ]
   * Don't verify with all checksum files
 .
   [ Luca Boccassi ]
   * Remove live-build's os-release on removal (Closes: #1111039)
Checksums-Sha1:
 366cffad4df19105f7a6422a135940484644167f 1899 live-boot_20250815~deb13u1.dsc
 f356b417635931b406f78d9730fb1235a08250f4 101528 live-boot_20250815~deb13u1.tar.xz
 46040709a6250e0270395603aa001d8972883a44 6316 live-boot_20250815~deb13u1_source.buildinfo
Checksums-Sha256:
 e7b3cda391be7555d9a5caadd2d63c817257c930738f42ca987af0bb1b018014 1899 live-boot_20250815~deb13u1.dsc
 31a47bd59f10b522b221ea4646383e9f30886455764f3436bc402b72c69864a7 101528 live-boot_20250815~deb13u1.tar.xz
 7ed2e7834581dac46f027503b9d9a7514d10e54e63e257992e72fb863706ab13 6316 live-boot_20250815~deb13u1_source.buildinfo
Files:
 d31c25edccba00043142297eefcd957b 1899 misc optional live-boot_20250815~deb13u1.dsc
 9a94aebae58de4cc42ae507db718ad9a 101528 misc optional live-boot_20250815~deb13u1.tar.xz
 4502131e41c5f1a7035d985bee9444e5 6316 misc optional live-boot_20250815~deb13u1_source.buildinfo
-----BEGIN PGP SIGNATURE-----
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=nAFv
-----END PGP SIGNATURE-----

#1111039#261
Date:
2025-08-22 10:47:10 UTC
From:
To:
We believe that the bug you reported is fixed in the latest version of
live-build, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1111039@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Luca Boccassi <bluca@debian.org> (supplier of updated live-build package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Thu, 14 Aug 2025 20:27:49 +0100
Source: live-build
Architecture: source
Version: 1:20250505+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: Debian Live <debian-live@lists.debian.org>
Changed-By: Luca Boccassi <bluca@debian.org>
Closes: 1111039
Changes:
 live-build (1:20250505+deb13u1) trixie; urgency=medium
 .
   * Remove os-release diversions once rootfs creation is finished
     (Closes: #1111039)
   * Install live-specific os-release only with --system live
Checksums-Sha1:
 c417697cc75a5778c7cc338cfafe4438da04b8a0 1948 live-build_20250505+deb13u1.dsc
 8d7b786e3e078c2907c91e16addb907aab114393 254340 live-build_20250505+deb13u1.tar.xz
 5efd85533fe61d8c63ad2063f5e2adb2b974d84d 12291 live-build_20250505+deb13u1_source.buildinfo
Checksums-Sha256:
 06a47dd5b8f1d451b3fa71d4ec9efeb85633dc4eae57478d8439621011214e49 1948 live-build_20250505+deb13u1.dsc
 1aad324e433d6cb6d038193252b74fd0ed1c1e1d7e1c6cf410c8fb09c5225b9e 254340 live-build_20250505+deb13u1.tar.xz
 2e47dc1211794a6ac7d424bdd6bc455b32f2bef7d71f5ab4992fc261f3c92af9 12291 live-build_20250505+deb13u1_source.buildinfo
Files:
 e6948b1ecd5035474ffbfaab9ab0bd56 1948 misc optional live-build_20250505+deb13u1.dsc
 5d7c530010fc75d7e0cdd232ecc71399 254340 misc optional live-build_20250505+deb13u1.tar.xz
 732b149f3a22f0c7ee72614e7b048284 12291 misc optional live-build_20250505+deb13u1_source.buildinfo
-----BEGIN PGP SIGNATURE-----
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=i91R
-----END PGP SIGNATURE-----

#1111039#266
Date:
2025-08-22 15:32:30 UTC
From:
To:
We believe that the bug you reported is fixed in the latest version of
init-system-helpers, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1111039@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Luca Boccassi <bluca@debian.org> (supplier of updated init-system-helpers package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Wed, 20 Aug 2025 19:58:21 +0100
Source: init-system-helpers
Architecture: source
Version: 1.65.2+deb12u1
Distribution: bookworm
Urgency: medium
Maintainer: Debian systemd Maintainers <pkg-systemd-maintainers@lists.alioth.debian.org>
Changed-By: Luca Boccassi <bluca@debian.org>
Closes: 1111039
Changes:
 init-system-helpers (1.65.2+deb12u1) bookworm; urgency=medium
 .
   * Add postinst to work around live-build issue on some systems. Needs to
     be somewhere that will be for sure installed, but all the live-*
     packages get removed on install, so there's nothing else. This is
     prio: essential so it's guaranteed to be there to do the cleanup. Can
     be dropped after Forky ships. (Closes: #1111039)
Checksums-Sha1:
 03b3f1e3a0868db490193e76059448ef4e95548a 2227 init-system-helpers_1.65.2+deb12u1.dsc
 6585fe0b5bcd99329aa56c91614386433d48be2b 44996 init-system-helpers_1.65.2+deb12u1.tar.xz
 234d2fffbe2c3d93eb98c148c08583f8746443aa 6890 init-system-helpers_1.65.2+deb12u1_source.buildinfo
Checksums-Sha256:
 d4c6d21578b0cc835b8941f2d0f1fc3de6c75af63c840d59e75a9a01a0fd4a09 2227 init-system-helpers_1.65.2+deb12u1.dsc
 84e6f3d88a72004751a8b01b48aa21f6e6c47da57aa2337d010901e2d5862b56 44996 init-system-helpers_1.65.2+deb12u1.tar.xz
 75e0c4ff0773adaf074f3eee08738dae5016894f68a99446ff10cddebe7a51df 6890 init-system-helpers_1.65.2+deb12u1_source.buildinfo
Files:
 7d64a1fb391dd327225c2cc8da71104d 2227 admin optional init-system-helpers_1.65.2+deb12u1.dsc
 2604fab1b2342b30f472612f4ccd18c7 44996 admin optional init-system-helpers_1.65.2+deb12u1.tar.xz
 787ff82e46dbf292620013a4f6adbeef 6890 admin optional init-system-helpers_1.65.2+deb12u1_source.buildinfo
-----BEGIN PGP SIGNATURE-----

iQJFBAEBCgAvFiEErCSqx93EIPGOymuRKGv37813JB4FAmimOmcRHGJsdWNhQGRl
Ymlhbi5vcmcACgkQKGv37813JB4zZQ/7BePEn0Mv3/bm/9I4pMPA5YkZWS+1bf1w
jeIFJtaLxSm/lglDOq18v8h9dHlnE3MkwQ4Va60lpJqbIh+ZweQaSwgr/l+x3MHe
vgO5BpIHO7Wnh90Z1ndMTZoWTcpdKDSgRxxAEwZ11Gvm1DfMKj3bRa0DLcYqX2Li
HU64v0C4mvt43UnSXlI2WTnB76tOd9A2DxIeC5ygTeNJL7H5xnrSLZIPBnu/aLc5
8NdXPC/2gw0MrGqP9+cVnfF7BOikHNMOenZR0x89CSizvQ/MPiQxW/u1KzfZdb9R
flTUwuWJxujQQP0keWYfK3bNPxo+11seh/Z0XTQl5yXGGlvyOus2ugRVEEspcFmb
7Eq5NPZytAQ6l+jVNVrZ2fRVXGajue5qfEX4fRwfcp2JxQiykzUTVSuAfTTkLxPm
h7oszillQdvcFVj2UI5hrZx9YpoUOpxNuZqc+Qp+hSTsqhIC6cLTglVo7zNtEidI
T1qMiQm9hVhhwYLLuDEOrApoXqI+byMFJXPUFmqnl1OxGHpAX1mLCeivyJwVtjot
wJLDcpIP/L1/zXURtw7Eq2bVK6piYX8GbWz0NuKGS92ioflC3gMONBXSbM/A7lyx
ePOAZOFrjskN+TCSwqJ7PJIaANwLX/lb0Y0KuYnisLf94FmCmxJzsxvZXMkpeK2P
/HFNBkw2PGw=
=zLA0
-----END PGP SIGNATURE-----