CONSTRUCT 20261009.2

CONSTRUCT 20261009.2

Built 2026-10-09 · GNOME Shell 51.0-r1 · Mesa 26.2.4-r2

Changes

5 changes since v20261009.1.

image

• /var/roothome is provision.conf's alone
• the fonts' cache baked into /usr, valid on the EROFS

gtk4-ding

• an eject finishes nothing on a mount gvfs already disposed

test

• the fonts' cache is the root's, and tmpfiles.d declares each path once

update

• the reboot notice only in a person's desktop session; sudo starts no user manager

Packages

982 packages: 5 updated, 0 added, 0 removed.

Updated

• alsa-lib 1.2.16.1-r2 → 1.2.16.1-r3
• bash 5.3-r13 → 5.3-r14
• bash-binsh 5.3-r13 → 5.3-r14
• gnome-shell-extension-gtk4-ding 100.29_git20261002-r1 → 100.29_git20261002-r2
• gnome-shell-extension-gtk4-ding-lang 100.29_git20261002-r1 → 100.29_git20261002-r2

Security

Grype over the release's root, on the day it was built:

severity	a version fixes it	nobody has yet
Critical	0	0
High	0	0
Medium	0	8
Low	0	0
Negligible	0	0
Unknown	0	0

The whole report is grype.md; Grype's own, grype.json; the packages, sbom.spdx.json.

Checked

• test: 507 of 507 checks passed
• lifecycle: 62 of 62 checks passed

Get it

An installed machine takes it by itself from its channel, and starts it at its next reboot.
A new machine: the USB stick, https://dl.constructlinux.org/construct_20261009.2.raw.xz, in the signed https://dl.constructlinux.org/SHA256SUMS; how to check it and write it to a stick is the README's Install.

Every file is in SHA256SUMS, signed with the release key (release.pgp):

gpg --import release.pgp && gpg --verify SHA256SUMS.gpg SHA256SUMS && sha256sum -c --ignore-missing SHA256SUMS