Relase v6.4 and Mock Core Configs v43.2

With the help of:
/usr/bin/tito tag --use-version=43.2
/usr/bin/tito tag --use-version=6.4
./releng/generate-release-notes --use-version 6.4

Author: praiskup

.tito/packages/mock

@@ -1 +1 @@
-6.3-1 mock/
+6.4-1 mock/

.tito/packages/mock-core-configs

@@ -1 +1 @@
-43.1-1 mock-core-configs/
+43.2-1 mock-core-configs/

docs/Release-Notes-6.4.md

@@ -0,0 +1,87 @@
+---
+layout: default
+title: Release Notes - Mock 6.4 and Core Configs 43.2
+---
+
+## [Release 6.4](https://rpm-software-management.github.io/mock/Release-Notes-6.4) - 2025-10-09
+
+
+### New features
+
+- A new plugin named `unbreq` has been added.  This plugin can detect unused
+  `BuildRequires` based on file access during the RPM build.  This plugin is
+  currently experimental and disabled by default.
+
+  It can be enabled in the configuration as follows:
+
+      config_opts['plugin_conf']['unbreq_enable'] = True
+
+  See the [documentation page](Plugin-Unbreq).
+
+- Added support for client certificates when using `mock-hermetic-repo`. This can be
+  specified as:
+
+      --client-cert-for example.com /path/crt.pem /path/key.pem
+
+
+### Changes
+
+- Mock now passes `--suppress-sync=yes` to every `systemd-nspawn` call (when
+  available, i.e., on RHEL 9 and later).  This turns off any form of on-disk
+  file system synchronization for the container payload.
+
+  This feature sets a new default for:
+
+      config_opts['nspawn_args'] = ['--capability=cap_ipc_lock', '--suppress-sync=yes']
+
+  This dramatically improves container runtime performance by up to 16% for
+  large packages.  It has little effect on building small packages.
+
+  The only drawback is that in the case of a hard shutdown (e.g., a power
+  outage) during the build (or any other operation you do with Mock), some
+  changes in the buildroot could be lost.  As the Mock buildroot is meant to be
+  ephemeral and reconstructed for every action, we have enabled this by default.
+  If you want to disable this feature, you can add the following to your
+  configuration:
+
+      config_opts['nspawn_args'] = ['--capability=cap_ipc_lock']
+
+- The [buildroot\_lock](Plugin-BuildrootLock) plugin's error reporting has been
+  improved.  It now displays all package NVRAs that are not found in the
+  configured DNF repositories; previously, it only displayed the first missing
+  package from the list.
+
+- We now set `module_hotfixes=true` on repositories generated using
+  `--localrepo`.  This allows fetching packages from the local repository that
+  are filtered out by modularity when building with `--chain --localrepo <dir>`.
+
+### Bugfixes
+
+- We now execute `repoquery` in `buildroot_lock.py` as a privileged user.
+  Otherwise, [DNF5 fails with](https://github.com/rpm-software-management/dnf5/issues/2392):
+
+      filesystem error: cannot create directories: Permission denied [/var/lib/mock/f44-build-repo_6596509/root/home/mockbuilder/.local/state]
+
+
+### Mock Core Config Changes
+
+- RHEL+EPEL configuration files now provide a `[local]` repository pointing to
+  EPEL buildroots in Koji, so users can use `--enablerepo=local`.  The `[local]`
+  repos are explicitly `gpgcheck=0`, as RHEL config `[main]` parts set
+  `gpgcheck=1` by default.
+
+- Azure Linux 2.0 configuration marked End of Life (CBL Mariner 2.0) to follow
+  the distribution's [End of Life](https://techcommunity.microsoft.com/blog/azurearcblog/eol-of-azure-linux-2-0-on-azure-kubernetes-service-enabled-by-azure-arc/4434242).
+
+- Added support for Kylin OS 11, released at the end of 2024.
+
+
+#### The following contributors have contributed to this release:
+
+- Andreas Rogge
+- Marián Konček
+- Miroslav Suchý
+- Scott Hebert
+- Takuya Wakazono
+
+Thank You!

docs/Releasing-Mock.md

@@ -29,7 +29,10 @@ Be sure to use the `--config-only` flag when generating release notes.
 
 ## Release checklist overview
 
-0. Make sure all GitHub CI checks are passing for the latest commit
+0. Make sure all GitHub CI checks are passing for the latest commit.
+   Roughly check the commits that are to be released:
+
+        $ tito report --untagged-commits
 
 1. Change to the correct local branch, e.g. `main`
 
@@ -47,13 +50,13 @@ Be sure to use the `--config-only` flag when generating release notes.
    the current version.
 
    For a full release (both mock and mock-core-configs):
-        
+
         $ sudo dnf install towncrier
         $ ./releng/generate-release-notes --use-version 5.1
         $ vim docs/Release-Notes-5.1.md  # modify manually!
-        
+
    For a mock-core-configs only release:
-   
+
         $ ./releng/generate-release-notes --use-version 40.3 --config-only
         $ vim docs/Release-Notes-Configs-40.3.md  # modify manually!
 
@@ -62,33 +65,35 @@ Be sure to use the `--config-only` flag when generating release notes.
    Add list of contributing authors:
 
    For mock:
+
        $ git log mock-4.1-1..HEAD --format="%aN" mock/ | sort | uniq
-   
+
    For mock-core-configs:
+
        $ git log mock-core-configs-38.1-1..HEAD --format="%aN" mock-core-configs/ | sort | uniq
 
 6. Commit all the pending changes
 
 7. On your box (you need push-access rights), tag the git tree:
 
    For a full release (both mock and mock-core-configs):
-       
+
        # First tag mock-core-configs
        $ cd ./mock-core-configs
        $ tito tag --use-version 40.3  # major.minor according to policy
-       
+
        # Then update mock's spec and tag mock
        # Update 'Conflicts: mock-core-configs < ??' in mock.spec
        $ cd ./mock
        $ tito tag --use-version 5.1  # major.minor according to policy
 
    For a mock-core-configs only release:
-   
+
        $ cd ./mock-core-configs
        $ tito tag --use-version 40.3  # major.minor according to policy
-       
+
    For a mock only release:
-   
+
        $ cd ./mock
        $ tito tag --use-version 5.1  # major.minor according to policy
 
@@ -107,28 +112,32 @@ Be sure to use the `--config-only` flag when generating release notes.
 
     These tito-generated commits can calmly be squashed, updated, etc. (you may
     include documentation fixes there).  Just don't forget to re-add the dropped
-    tag back (if dropped) 'git tag mock-4.1-1'.  Alternatively just `git push`
+    tag back (if dropped) `git tag mock-4.1-1`.  Alternatively just `git push`
     the commits.
 
 9. Push the git tags upstream, e.g.
 
    For mock-core-configs:
+
        $ git push origin mock-core-configs-40.4-1
-       
+
    For mock:
+
        $ git push origin mock-5.1-1
 
 10. Release for EPEL and Fedora
 
-    $ # make sure that .tito/releasers.conf is up to date
-    
+    Make sure that `.tito/releasers.conf` is up to date.
+
     For mock-core-configs:
-    $ cd ./mock-core-configs
-    $ tito release fedora-git-all
-    
+
+        $ cd ./mock-core-configs
+        $ tito release fedora-git-all
+
     For mock:
-    $ cd ./mock
-    $ tito release fedora-git-all
+
+        $ cd ./mock
+        $ tito release fedora-git-all
 
 11. publish tgz
 

docs/index.md

@@ -70,6 +70,7 @@ Versions in Linux distributions:
 
 
 ## Release Notes
+* [6.4 and Configs 43.2](Release-Notes-6.4) (2025-10-09) - Release 6.4 adds the experimental `unbreq` plugin and boosts performance with a new default setting.
 * [Configs 43.1](Release-Notes-Configs-43.1) (2025-08-12) - Fedora 43 branched.
 * [6.3 and Configs 42.4](Release-Notes-6.3) (2025-06-18) - Compatibility bug-fix for Python 3.14, configuration is owned by root group, AlmaLinux and Rocky Linux 10 added.
 * [6.2 and Configs 42.3](Release-Notes-6.2) (2025-05-22) - RHEL 10 configuration, configurable ca-trust paths that Mock copies to chroots.

mock-core-configs/mock-core-configs.spec

@@ -3,7 +3,7 @@
 %endif
 
 Name:       mock-core-configs
-Version:    43.1
+Version:    43.2
 Release:    1%{?dist}
 Summary:    Mock core config files basic chroots
 
@@ -152,6 +152,12 @@ fi
 %ghost %config(noreplace,missingok) %{_sysconfdir}/mock/default.cfg
 
 %changelog
+* Thu Oct 09 2025 Pavel Raiskup <[email protected]> 43.2-1
+- disable gpgcheck for EPEL [local] repos
+- make sure [local] repo is available in rhel+epel repos
+- Add Kylin OS 11 ([email protected])
+- Azure Linux (CBL Mariner) 2.0 is now EOL ([email protected])
+
 * Tue Aug 12 2025 Jiri Kyjovsky <[email protected]> 43.1-1
 - Move Rawhide to F44
 

mock/mock.spec

@@ -18,7 +18,7 @@
 
 Summary: Builds packages inside chroots
 Name: mock
-Version: 6.3
+Version: 6.4
 Release: 1%{?dist}
 License: GPL-2.0-or-later
 # Source is created by
@@ -329,6 +329,15 @@ pylint-3 py/mockbuild/ py/*.py py/mockbuild/plugins/* || :
 
 
 %changelog
+* Thu Oct 09 2025 Pavel Raiskup <[email protected]> 6.4-1
+- add unbreq plugin for detection of unused BuildRequires ([email protected])
+- set module_hotfixes=true for --addrepo repositories ([email protected])
+- added options to /bin/mock-hermetic-repo support for client certificates ([email protected])
+- use "systemd-nspawn --suppress-sync=yes" when available ([email protected])
+- buildroot_lock: call repoquery as a privileged user
+- buildroot_lock: better error reporting
+- fix unclosed file warning ([email protected])
+
 * Wed Jun 18 2025 Pavel Raiskup <[email protected]> 6.3-1
 - lockfile: don't hard-code DNF _bindir location, use config_opts
 - fix sysusers packaging once more