Skip to content

CONSTRUCT 20261009.1

Choose a tag to compare

@construct-infra construct-infra released this 09 Oct 01:44

CONSTRUCT 20261009.1

Built 2026-10-09 · GNOME Shell 51.0-r1 · Mesa 26.2.4-r2

Changes

9 changes since v20261008.2.

firmware

  • the BE211's Bluetooth DDC without its stray byte
  • the sensor hub's firmware name worked out as the kernel does

diagnose

  • a D-Bus service that started late is no authentication failure

gnome-settings-daemon

  • no USB protection, print notifications, a quiet stop

gst-plugins-good

  • vp8enc, so the screen can be recorded

lifecycle

  • an SSH key made on the security key

openssh

  • built-in FIDO, so an SSH key can live on a security key

orca

  • a screen reader, so the Accessibility switch does something

orchis-theme

  • an app folder opens whole

Packages

982 packages: 28 updated, 10 added, 0 removed.

Updated (28)
  • bzip2 1.0.8-r24 → 1.0.8-r25
  • bzip2-dev 1.0.8-r24 → 1.0.8-r25
  • containerd-2 2.4.1-r0 → 2.4.1-r1
  • containerd-service-2 2.4.1-r0 → 2.4.1-r1
  • containerd-shim-runc-v2-2 2.4.1-r0 → 2.4.1-r1
  • containerd-stress-2 2.4.1-r0 → 2.4.1-r1
  • ctr-2 2.4.1-r0 → 2.4.1-r1
  • docker-29 29.8.2-r2 → 29.8.2-r3
  • docker-cli 29.8.2-r0 → 29.9.0-r0
  • docker-cli-buildx 0.38.0-r0 → 0.38.0-r1
  • docker-compose 5.6.0-r0 → 5.6.0-r1
  • docker-init-29 29.8.2-r2 → 29.8.2-r3
  • dockerd-29 29.8.2-r2 → 29.8.2-r3
  • dockerd-service-29 29.8.2-r2 → 29.8.2-r3
  • gnome-settings-daemon 51.0-r0 → 51.0-r1
  • gst-plugins-good 1.29.2-r1 → 1.29.2-r2
  • libacl1 2.4.0-r3 → 2.4.0-r4
  • libbz2-1 1.0.8-r24 → 1.0.8-r25
  • openssh-client 10.6_p1-r0 → 10.6_p1-r1
  • openssh-keygen 10.6_p1-r0 → 10.6_p1-r1
  • openssh-server 10.6_p1-r0 → 10.6_p1-r1
  • openssh-server-config 10.6_p1-r0 → 10.6_p1-r1
  • openssh-sk-helper 10.6_p1-r0 → 10.6_p1-r1
  • orchis-theme 20260914-r16 → 20260914-r17
  • orchis-theme-shell 20260914-r16 → 20260914-r17
  • pkgconf 3.0.7-r0 → 3.0.8-r0
  • runc 1.5.2-r0 → 1.5.2-r1
  • tailscale 1.102.5-r0 → 1.104.1-r1

Added

  • dotconf 1.4.1-r0
  • espeak-ng 1.52.0-r0
  • libvpx 1.17.0-r2
  • orca 51.0-r0
  • orca-lang 51.0-r0
  • py3-dasbus 1.7-r0
  • py3.13-psutil 7.2.2-r5
  • pyatspi 2.58.2-r0
  • speech-dispatcher 0.12.1-r0
  • speech-dispatcher-lang 0.12.1-r0

Security

Grype over the release's root, on the day it was built:

severity a version fixes it nobody has yet
Critical 0 0
High 0 0
Medium 0 8
Low 0 0
Negligible 0 0
Unknown 0 0

The whole report is grype.md; Grype's own, grype.json; the packages, sbom.spdx.json.

Checked

  • test: 507 of 507 checks passed
  • lifecycle: 62 of 62 checks passed

Get it

An installed machine takes it by itself from its channel, and starts it at its next reboot.
A new machine: the USB stick, https://dl.constructlinux.org/construct_20261009.1.raw.xz, in the signed https://dl.constructlinux.org/SHA256SUMS; how to check it and write it to a stick is the README's Install.

Every file is in SHA256SUMS, signed with the release key (release.pgp):

gpg --import release.pgp && gpg --verify SHA256SUMS.gpg SHA256SUMS && sha256sum -c --ignore-missing SHA256SUMS