The Wire · Showcase
CEF CLEARS TESTING, CHROMIUM PROMOTED, MKINITCPIO HARDENS ENCRYPTION
By RepoJournal · Filed · About Arch Linux
Chromium Embedded Framework graduates to stable after vetting, while core boot infrastructure tightens cryptsetup integration and systemd dependency handling.
CEF 148.0.8-2 moved from testing to stable [1][2], clearing the way for downstream projects like OBS Studio, which also landed an update in testing [3]. Chromium itself was promoted to extra-x86_64 after validation [4]. Over in mkinitcpio, two critical merge requests landed: one adds dlopen'ed libcryptsetup support to the encrypt hook [6][8], hardening encrypted boot scenarios by properly bundling the crypto library, and another overhauls systemd unit handling to catch OnSuccess dependencies and search additional unit paths [7]. Signstar cut several releases addressing a breaking API change where YubiHsm2UserMapping::domain becomes ::domains to support multiple domain returns [9][10][11], plus an immediate fix yanking a broken aes crate version [12]. Modrinth App got bumped to 0.14.0 in testing [5].
Action items
- → Pull CEF 148.0.8-2 into production systems relying on embedded Chromium archlinux/packages [plan]
- → Regenerate initramfs if using encrypted root volumes archlinux/mkinitcpio [plan]
- → Rebuild projects consuming signstar if pinned to pre-refactor versions archlinux/signstar [monitor]
- → Verify systemd unit resolution after mkinitcpio merge archlinux/mkinitcpio [monitor]
References
- [1] update cef to 148.0.8-2 in extra-testing-x86_64 archlinux/state
- [2] move cef from extra-testing-x86_64 to extra-x86_64 archlinux/state
- [3] update obs-studio to 32.1.2-5 in extra-testing-x86_64 archlinux/state
- [4] move chromium from extra-testing-x86_64 to extra-x86_64 archlinux/state
- [5] update modrinth-app to 0.14.0-1 in extra-testing-x86_64 archlinux/state
- [6] Merge remote-tracking branch 'origin/merge-requests/474' archlinux/mkinitcpio
- [7] Merge remote-tracking branch 'origin/merge-requests/473' archlinux/mkinitcpio
- [8] install/encrypt: add dlopen'ed libcryptsetup archlinux/mkinitcpio
- [9] refactor!: Return optional `Domains` from `YubiHsm2UserMapping::domains` archlinux/signstar
- [10] feat: Rely on `Domains::bits` in `Domains::to_be_bytes` archlinux/signstar
- [11] feat: Add `Domains::bits` to return the underlying bits value archlinux/signstar
- [12] fix(deps): Upgrade `aes` crate to version 0.9.1 archlinux/signstar
FAQ
- What changed in Arch Linux on May 28, 2026?
- Chromium Embedded Framework graduates to stable after vetting, while core boot infrastructure tightens cryptsetup integration and systemd dependency handling.
- What should Arch Linux teams do about it?
- Pull CEF 148.0.8-2 into production systems relying on embedded Chromium • Regenerate initramfs if using encrypted root volumes • Rebuild projects consuming signstar if pinned to pre-refactor versions
- Which Arch Linux repositories shipped on May 28, 2026?
- archlinux/state, archlinux/mkinitcpio, archlinux/signstar