Repository navigation
CONSTRUCT 20261008.2
CONSTRUCT 20261008.2
Built 2026-10-08 · GNOME Shell 51.0-r1 · Mesa 26.2.4-r2
Changes
22 changes since v20261008.1.
diagnose
- the gathering and the reading in internal/diagnose
- a cut keeps letters whole, a failed archive is not left behind
harness
- the journal around each error, in journal-context.txt
- one wait for a guest to go, one quit, one wait for sshd
image
- one reader of apk's database
- the AWS CLI's two runners in aws.go, release-log reads new bytes once
power
- a machine with no RAPL counter is not told to use sudo
- Measure over a context, and the system's batteries with their health
securitykey
- a failed program's error ends with what it said, or nothing
- one reader of the LUKS2 header
gnome-shell-extension-gtk4-ding
- the desktop's file list is never null
install
- a key never touched is said by construct, not guessed by the installer
kernel
- 7.2.9
key
- construct key add asks again for a missed touch
keyd
- no empty AmbientCapabilities=, which is the default
lf
- each view measured, then checked
lifecycle
- the installed disk boots without the splash, and the TPM opens it
needles
- a sweep's areas are pixels.Rect
sysctl
- fq for every interface, under BBR
test
- the desktop's labels read by a probe of image/test's, not Python in a Go string
update
- the slot's UUIDs from its root hash in one place
usb
- a boot without the splash, as a second entry in systemd-boot's menu
Packages
972 packages: 10 updated, 0 added, 0 removed.
Updated
- avahi 0.9_rc5-r1 → 0.9_rc5-r2
- build-base 1-r9 → 1-r10
- cairomm 1.19.1-r1 → 1.19.1-r2
- gnome-shell-extension-gtk4-ding 100.29_git20261002-r0 → 100.29_git20261002-r1
- gnome-shell-extension-gtk4-ding-lang 100.29_git20261002-r0 → 100.29_git20261002-r1
- gstreamer 1.29.2-r2 → 1.29.2-r3
- libxdmcp 1.1.5-r11 → 1.1.5-r12
- libxdmcp-dev 1.1.5-r11 → 1.1.5-r12
- py3.13-pycparser 3.00-r6 → 3.01-r0
- vim 9.2.1169-r0 → 9.2.1172-r0
Security
Grype over the release's root, on the day it was built:
| severity | a version fixes it | nobody has yet |
|---|---|---|
| Critical | 0 | 0 |
| High | 0 | 0 |
| Medium | 0 | 8 |
| Low | 0 | 0 |
| Negligible | 0 | 0 |
| Unknown | 0 | 0 |
The whole report is grype.md; Grype's own, grype.json; the packages, sbom.spdx.json.
Checked
- test: 502 of 502 checks passed
- lifecycle: 61 of 61 checks passed
Get it
An installed machine takes it by itself from its channel, and starts it at its next reboot.
A new machine: the USB stick, https://dl.constructlinux.org/construct_20261008.2.raw.xz, in the signed https://dl.constructlinux.org/SHA256SUMS; how to check it and write it to a stick is the README's Install.
Every file is in SHA256SUMS, signed with the release key (release.pgp):
gpg --import release.pgp && gpg --verify SHA256SUMS.gpg SHA256SUMS && sha256sum -c --ignore-missing SHA256SUMS