Your message dated Tue, 25 Nov 2025 23:18:48 +0000
with message-id <[email protected]>
and subject line Bug#1091455: fixed in dracut 109-3
has caused the Debian Bug report #1091455,
regarding RFE: use wrapper instead of patching dracut to run initramfs hooks
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
1091455: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1091455
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: dracut
Version: 105-2
Severity: normal
X-Debbugs-Cc: [email protected]

Dear Maintainer,

Fix of #753752 introduced a patch for the dracut executable intended
to invoke initramfs generator hooks from /etc/initramfs/post-update.d/
on each dracut invocation (guarded by an environment variable though).

Despite my respect for adhering to kernel handbook guidelines I found
the usage of dracut is now may be confusing due to:

1) Debian is now using both `dracut` and `kernel-install` tools used
also outside of Debian world. However while the tools have the same
names in both worlds, their usage semantics are reversed:
 - In Debian: dracut invokes kernel-install (via a post-update hook)
 - In non-Debian: kernel-install invokes dracut
I believe it could be source of confusion for users over time.

2) Invocation of post update hooks is opt-out. Personally, I have
bumped into unexpectedly updated boot images several times when
switching between distros while testing dracut workflows.

3) Setting environment variable on the command line is clunky and
shell completion does not help with it.

Hence it is proposed to introduce a wrapper intended to invoke hooks
and possibly deal with Debian workflows integration in general. The
wrapper could then be considered a subject to adhering policies. And
original dracut executable should remain "lower-level" tool. Which
usage experience does not differ from non-Debian world.



In its simplest form, it could look like:

$ cat `which dracut-wrapper`
#!/bin/sh

/usr/bin/dracut "$@"

# Invoke policy-conformant bootloader hooks
if [ -z "$NO_POST_UPDATE_HOOKS" ] && [ -d /etc/initramfs/post-update.d/ ]; then
    run-parts --arg="${kernel}" --arg="${outfile}" \
        /etc/initramfs/post-update.d/
fi  

# ${kernel} and ${outfile} to be determined :)


Another reason to introduce a wrapper is the need to restrict dracut
invocation to sane defaults. For example:

* Dracut has a feature to generate UKIs. Currently usage of the --uefi
option on the command line or in dracut configuration files may lead
to weird situations where UKIs are saved in places where initrds are
expected. As a result, the boot may be broken.

* Dracut has its own heuristic to determine the location of the
generated initrd image files if it isn't specified by the user.
However, the determined location is not always what the end-user
expects.



There are multiple approaches for the wrapper that I could think of:

a) Wrapper preserves interface of dracut executable. This is basically
demonstrated in the example above.

b) Wrapper re-implements interface of the update-initramfs script. In
case, update-alternatives mechanism could be used to swap between
implementations.

c) For the sake of completeness, just use the kernel-install script
provided in dracut repo. Then configure systems to use kernel-install
in some setups (in particular dracut + systemd-boot) and encourage
users to use kernel-install directly.


Best,
Roman



-- System Information:
Debian Release: trixie/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 6.12.6-amd64 (SMP w/4 CPU threads; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

--- End Message ---
--- Begin Message ---
Source: dracut
Source-Version: 109-3
Done: Benjamin Drung <[email protected]>

We believe that the bug you reported is fixed in the latest version of
dracut, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Benjamin Drung <[email protected]> (supplier of updated dracut package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 25 Nov 2025 19:40:40 +0100
Source: dracut
Built-For-Profiles: noudeb
Architecture: source
Version: 109-3
Distribution: unstable
Urgency: medium
Maintainer: Thomas Lange <[email protected]>
Changed-By: Benjamin Drung <[email protected]>
Closes: 1091455 1120955
Changes:
 dracut (109-3) unstable; urgency=medium
 .
   * test:
     - forward journald logs to console in V=1 or V=2
     - replace rev command by sed and drop bsdextrautils dependency
     - use UEFI for QEMU when available and support UEFI on ARM
   * dracut-test: ovmf is only needed for amd64
   * Drop debian-initramfs-post-update.patch because the update-initramfs
     script (shipped by dracut) invokes the bootloader hooks from
     /etc/initramfs/post-update.d. (Closes: #1091455)
   * autopkgtest: Skip failing (hanging) 41-full-systemd on s390x
     (Closes: #1120955)
Checksums-Sha1:
 a3192a2e7ad2aa83f493c10231909cef35ee2cdf 2860 dracut_109-3.dsc
 9859c0d19c8adc6e55582bee481612cd34d3ac46 28940 dracut_109-3.debian.tar.xz
 ed1f028aae0da255f8f8894401bc80f05df448e0 8583 dracut_109-3_source.buildinfo
Checksums-Sha256:
 42f3f5206125aeec18de2f8c25a9ff430a3fc17751fa659480c13d2985430e7f 2860 
dracut_109-3.dsc
 ae0b52cfc467fcac7225126a76381a7bacd48c6ff4218165af73ebb20b4c3bdb 28940 
dracut_109-3.debian.tar.xz
 d7f519eded15f4e189f7399e2a5d2ff8dfd7d9d938e0361c0860ad8a4b2e9f32 8583 
dracut_109-3_source.buildinfo
Files:
 4c9c906ec89c725a53b14c4fbb4e4f6a 2860 utils optional dracut_109-3.dsc
 c4a2c433d59375ada8b8317ac2ae5f7b 28940 utils optional 
dracut_109-3.debian.tar.xz
 8862e21c9ea6aac3a29cc3b62a2038d6 8583 utils optional 
dracut_109-3_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=1nZJ
-----END PGP SIGNATURE-----

Attachment: pgpvgZFThkX3L.pgp
Description: PGP signature


--- End Message ---

Reply via email to