Release v2025.9 · coreos/rpm-ostree

What's Changed

postprocess: Don't hardcode "targeted" policy by @alexlarsson in #5382
rust/bwrap: child_wait_check: let gio check status by @dustymabe in #5387
docs: Describe how to map container -> ostree by @cgwalters in #5385
rust/bwrap: don't swallow STDERR when running commands by @dustymabe in #5388
main: Silence SELinux log spam by @cgwalters in #5352
tests/override-replace-2: increase reliability of selinux override by @dustymabe in #5389
compose: Cache RPMs if cache dir on separate filesystem by @jlebon in #5391
libpriv/kernel: Pass through DRACUT_NO_XATTR when running dracut by @jlebon in #5397
passwd: Prep work for fixing #5365 by @cgwalters in #5398
libpriv/kernel: Pass through DRACUT_NO_XATTR more cleanly by @jlebon in #5404
fix(compose): move usermod sysusers.d fragments to correct directory by @cgwalters in #5394
rust/src/compose: add --write-lockfile-to / --lockfile-strict by @champtar in #5412
scripts: suppress error about glibc.posttrans scriptlet by @keszybz in #5415
Update to bootc 1.3.0 by @cgwalters in #5410
rechunker: Add --format-version=2 by @jeckersb in #5421
core: Run sysusers after doing passwd/group layering dance by @jlebon in #5403
Add support for skipping lua scripts via a magic comment by @cgwalters in #5425
Sync repo templates ⚙ by @coreosbot-releng in #5426
kernel: Drop check for ostree-container by @cgwalters in #5430
Un-hide finalization APIs by @cgwalters in #5424
treefile: Add sysusers: knob by @jlebon in #5427
Release 2025.9 by @cgwalters in #5432

Full Changelog: v2025.8...v2025.9