Repository navigation
CONSTRUCT 20261009.1
CONSTRUCT 20261009.1
Built 2026-10-09 · GNOME Shell 51.0-r1 · Mesa 26.2.4-r2
Changes
9 changes since v20261008.2.
firmware
- the BE211's Bluetooth DDC without its stray byte
- the sensor hub's firmware name worked out as the kernel does
diagnose
- a D-Bus service that started late is no authentication failure
gnome-settings-daemon
- no USB protection, print notifications, a quiet stop
gst-plugins-good
- vp8enc, so the screen can be recorded
lifecycle
- an SSH key made on the security key
openssh
- built-in FIDO, so an SSH key can live on a security key
orca
- a screen reader, so the Accessibility switch does something
orchis-theme
- an app folder opens whole
Packages
982 packages: 28 updated, 10 added, 0 removed.
Updated (28)
- bzip2 1.0.8-r24 → 1.0.8-r25
- bzip2-dev 1.0.8-r24 → 1.0.8-r25
- containerd-2 2.4.1-r0 → 2.4.1-r1
- containerd-service-2 2.4.1-r0 → 2.4.1-r1
- containerd-shim-runc-v2-2 2.4.1-r0 → 2.4.1-r1
- containerd-stress-2 2.4.1-r0 → 2.4.1-r1
- ctr-2 2.4.1-r0 → 2.4.1-r1
- docker-29 29.8.2-r2 → 29.8.2-r3
- docker-cli 29.8.2-r0 → 29.9.0-r0
- docker-cli-buildx 0.38.0-r0 → 0.38.0-r1
- docker-compose 5.6.0-r0 → 5.6.0-r1
- docker-init-29 29.8.2-r2 → 29.8.2-r3
- dockerd-29 29.8.2-r2 → 29.8.2-r3
- dockerd-service-29 29.8.2-r2 → 29.8.2-r3
- gnome-settings-daemon 51.0-r0 → 51.0-r1
- gst-plugins-good 1.29.2-r1 → 1.29.2-r2
- libacl1 2.4.0-r3 → 2.4.0-r4
- libbz2-1 1.0.8-r24 → 1.0.8-r25
- openssh-client 10.6_p1-r0 → 10.6_p1-r1
- openssh-keygen 10.6_p1-r0 → 10.6_p1-r1
- openssh-server 10.6_p1-r0 → 10.6_p1-r1
- openssh-server-config 10.6_p1-r0 → 10.6_p1-r1
- openssh-sk-helper 10.6_p1-r0 → 10.6_p1-r1
- orchis-theme 20260914-r16 → 20260914-r17
- orchis-theme-shell 20260914-r16 → 20260914-r17
- pkgconf 3.0.7-r0 → 3.0.8-r0
- runc 1.5.2-r0 → 1.5.2-r1
- tailscale 1.102.5-r0 → 1.104.1-r1
Added
- dotconf 1.4.1-r0
- espeak-ng 1.52.0-r0
- libvpx 1.17.0-r2
- orca 51.0-r0
- orca-lang 51.0-r0
- py3-dasbus 1.7-r0
- py3.13-psutil 7.2.2-r5
- pyatspi 2.58.2-r0
- speech-dispatcher 0.12.1-r0
- speech-dispatcher-lang 0.12.1-r0
Security
Grype over the release's root, on the day it was built:
| severity | a version fixes it | nobody has yet |
|---|---|---|
| Critical | 0 | 0 |
| High | 0 | 0 |
| Medium | 0 | 8 |
| Low | 0 | 0 |
| Negligible | 0 | 0 |
| Unknown | 0 | 0 |
The whole report is grype.md; Grype's own, grype.json; the packages, sbom.spdx.json.
Checked
- test: 507 of 507 checks passed
- lifecycle: 62 of 62 checks passed
Get it
An installed machine takes it by itself from its channel, and starts it at its next reboot.
A new machine: the USB stick, https://dl.constructlinux.org/construct_20261009.1.raw.xz, in the signed https://dl.constructlinux.org/SHA256SUMS; how to check it and write it to a stick is the README's Install.
Every file is in SHA256SUMS, signed with the release key (release.pgp):
gpg --import release.pgp && gpg --verify SHA256SUMS.gpg SHA256SUMS && sha256sum -c --ignore-missing SHA256SUMS