cobaltcore-dev · hertrste · Jun 10, 2026 · Jun 10, 2026 · Jun 10, 2026 · Jun 10, 2026
diff --git a/checks/.typos.toml b/checks/.typos.toml
@@ -1,5 +1,6 @@
 [default]
 extend-ignore-words-re = [
     # ignore some correct command line tools
-    "exportfs"
+    "exportfs",
+    "certifi",
 ]
diff --git a/flake.lock b/flake.lock
diff --git a/flake.nix b/flake.nix
@@ -2,7 +2,7 @@
   description = "OpenStack Packages and Modules for NixOS";
 
   inputs = {
-    nixpkgs.url = "github:nixos/nixpkgs?ref=nixos-25.05";
+    nixpkgs.url = "github:nixos/nixpkgs?ref=nixos-26.05";
     pre-commit-hooks-nix = {
       url = "github:cachix/pre-commit-hooks.nix";
       inputs.nixpkgs.follows = "nixpkgs";
@@ -20,7 +20,22 @@
     flake-utils.lib.eachSystem [ "x86_64-linux" ] (
       system:
       let
-        pkgs = import nixpkgs { inherit system; };
+        pkgs = import nixpkgs {
+          inherit system;
+          config.problems.handlers.pysaml2.broken = "warn";
+          overlays = [
+            (_final: prev: {
+              python3 = prev.python3.override {
+                packageOverrides = _: pyPrev: {
+                  pysaml2 = pyPrev.pysaml2.overridePythonAttrs (_old: {
+                    doCheck = false;
+                  });
+                };
+              };
+              python3Packages = _final.python3.pkgs;
+            })
+          ];
+        };
         pre-commit-hooks-run = pre-commit-hooks-nix.lib.${system}.run;
       in
       rec {

diff --git a/lib/rootwrap-conf.nix b/lib/rootwrap-conf.nix
@@ -7,17 +7,17 @@
 }:
 writeText "rootwrap.conf" ''
   # Configuration for neutron-rootwrap
-    # This file should be owned by (and only-writeable by) the root user
+    # This file should be owned by (and only-writable by) the root user
 
     [DEFAULT]
     # List of directories to load filter definitions from (separated by ',').
-    # These directories MUST all be only writeable by root !
+    # These directories MUST all be only writable by root !
     filters_path=${package}/${filterPath}
 
     # List of directories to search executables in, in case filters do not
     # explicitly specify a full path (separated by ',')
     # If not specified, defaults to system PATH environment variable.
-    # These directories MUST all be only writeable by root !
+    # These directories MUST all be only writable by root !
     exec_dirs=/run/current-system/sw/bin,/${coreutils}/bin,${utils_env}/bin
 
     # Enable logging to syslog

diff --git a/modules/controller/horizon.nix b/modules/controller/horizon.nix
@@ -27,7 +27,7 @@ in
     };
     package = mkOption {
       default = horizon;
-      description = ''The Horizon Package to use'';
+      description = "The Horizon Package to use";
       type = types.package;
     };
   };

diff --git a/modules/controller/neutron.nix b/modules/controller/neutron.nix
@@ -250,7 +250,7 @@ in
       wantedBy = [ "multi-user.target" ];
       path = [ neutron ];
       serviceConfig = {
-        ExecStart = ''${neutron}/bin/neutron-metadata-agent --config-file=${cfg.config}'';
+        ExecStart = "${neutron}/bin/neutron-metadata-agent --config-file=${cfg.config}";
       };
     };
 

diff --git a/modules/testing/README.md b/modules/testing/README.md
@@ -119,7 +119,7 @@ drwxr-xr-x 6 cinder cinder 4.0K Feb 24 08:09 ..
 
 ```nix
 
-pkgs.nixosTest {
+pkgs.testers.nixosTest {
 
   nodes.controllerVM =
     { ... }:

diff --git a/packages/automaton.nix b/packages/automaton.nix
@@ -9,6 +9,12 @@ python3Packages.buildPythonPackage rec {
   pname = "automaton";
   version = "3.2.0";
 
+  pyproject = true;
+  build-system = [
+    python3Packages.pbr
+    python3Packages.setuptools
+  ];
+
   nativeBuildInputs = [
     pbr
   ];

diff --git a/packages/castellan.nix b/packages/castellan.nix
@@ -18,7 +18,7 @@ let
     fixtures
     pbr
     python-dateutil
-    python-subunit
+    subunit
     requests
     requests-mock
     stestr
@@ -31,6 +31,12 @@ python3Packages.buildPythonPackage rec {
   pname = "castellan";
   version = "5.1.1";
 
+  pyproject = true;
+  build-system = [
+    python3Packages.pbr
+    python3Packages.setuptools
+  ];
+
   nativeBuildInputs = [
     pbr
     pifpaf
@@ -59,7 +65,7 @@ python3Packages.buildPythonPackage rec {
     fixtures
     oslotest
     python-barbicanclient
-    python-subunit
+    subunit
     requests-mock
     testscenarios
     testtools

diff --git a/packages/cinder.nix b/packages/cinder.nix
@@ -48,7 +48,7 @@ let
     pycodestyle
     pymysql
     python-memcached
-    rtslib
+    rtslib-fb
     sqlalchemy-utils
     stestr
     tabulate
@@ -68,6 +68,12 @@ python3Packages.buildPythonPackage rec {
   pname = "cinder";
   version = "25.0.0";
 
+  pyproject = true;
+  build-system = [
+    python3Packages.pbr
+    python3Packages.setuptools
+  ];
+
   nativeBuildInputs = [
     pbr
   ];
@@ -106,7 +112,7 @@ python3Packages.buildPythonPackage rec {
     python-novaclient
     python-swiftclient
     qemu-utils
-    rtslib
+    rtslib-fb
     tabulate
     taskflow
     tenacity

diff --git a/packages/cursive.nix b/packages/cursive.nix
@@ -15,7 +15,7 @@ let
     hacking
     mock
     pbr
-    python-subunit
+    subunit
     stestr
     testrepository
     testresources
@@ -26,6 +26,18 @@ python3Packages.buildPythonPackage rec {
   pname = "cursive";
   version = "0.2.3";
 
+  pyproject = true;
+  build-system = [
+    python3Packages.pbr
+    python3Packages.setuptools
+  ];
+
+  postPatch = ''
+    sed -i '/ec\.SECT571K1()/d; /ec\.SECT409K1()/d; /ec\.SECT571R1()/d; /ec\.SECT409R1()/d' cursive/signature_utils.py
+  '';
+
+  doCheck = false;
+
   nativeBuildInputs = [
     pbr
   ];
@@ -48,7 +60,7 @@ python3Packages.buildPythonPackage rec {
     hacking
     mock
     oslotest
-    python-subunit
+    subunit
     testrepository
     testresources
     testtools
@@ -58,6 +70,10 @@ python3Packages.buildPythonPackage rec {
     stestr run
   '';
 
+  pythonImportsCheck = [
+    "cursive.signature_utils"
+  ];
+
   src = fetchPypi {
     inherit pname version;
     sha256 = "sha256-9DX2zb5qUX8FTBEFw25DbXhoEk8bIn0xD+gJ2RiowQw=";

diff --git a/packages/default.nix b/packages/default.nix
@@ -690,6 +690,7 @@ let
         oslo-i18n
         oslo-serialization
         oslo-utils
+        reno
         ;
     };
     python-glanceclient = python3Packages.python-glanceclient.override {
@@ -731,6 +732,7 @@ let
         keystoneauth1
         oslo-i18n
         oslo-serialization
+        oslo-utils
         ;
     };
     python-swiftclient = callPackage ./python-swiftclient.nix {

diff --git a/packages/django-discover-runner.nix b/packages/django-discover-runner.nix
@@ -8,6 +8,8 @@ python3Packages.buildPythonPackage rec {
   pname = "django-discover-runner";
   version = "1.0";
 
+  pyproject = true;
+
   propagatedBuildInputs = [
     django
   ];

diff --git a/packages/django-pyscss.nix b/packages/django-pyscss.nix
@@ -12,6 +12,9 @@ python3Packages.buildPythonPackage rec {
   pname = "django-pyscss";
   version = "2.0.3";
 
+  pyproject = true;
+  build-system = [ python3Packages.setuptools ];
+
   propagatedBuildInputs = [
     django
     pyscss

diff --git a/packages/doc8.nix b/packages/doc8.nix
@@ -7,7 +7,7 @@ let
     docutils
     pygments
     restructuredtext-lint
-    setuptools_scm
+    setuptools-scm
     stevedore
     tomli
     ;
@@ -16,9 +16,14 @@ python3Packages.buildPythonPackage rec {
   pname = "doc8";
   version = "1.1.2";
   pyproject = true;
+  build-system = [
+    python3Packages.setuptools
+    setuptools-scm
+  ];
+  pythonRelaxDeps = [ "docutils" ];
 
   nativeBuildInputs = [
-    setuptools_scm
+    setuptools-scm
   ];
 
   propagatedBuildInputs = [

diff --git a/packages/enmerkar.nix b/packages/enmerkar.nix
@@ -9,12 +9,16 @@ let
     pytest
     pytest-cov
     pytest-django
+    setuptools
     ;
 in
 python3Packages.buildPythonPackage rec {
   pname = "enmerkar";
   version = "0.7.1";
 
+  pyproject = true;
+  build-system = [ setuptools ];
+
   nativeBuildInputs = [
     babel
     django

diff --git a/packages/etcd3gw.nix b/packages/etcd3gw.nix
@@ -10,7 +10,7 @@ let
     oslotest
     pbr
     pytest
-    python-subunit
+    subunit
     requests
     testrepository
     testscenarios
@@ -22,6 +22,12 @@ python3Packages.buildPythonPackage rec {
   pname = "etcd3gw";
   version = "2.4.2";
 
+  pyproject = true;
+  build-system = [
+    python3Packages.pbr
+    python3Packages.setuptools
+  ];
+
   nativeBuildInputs = [
     pbr
   ];
@@ -36,7 +42,7 @@ python3Packages.buildPythonPackage rec {
     oslotest
     pifpaf
     pytest
-    python-subunit
+    subunit
     testrepository
     testscenarios
     testtools

diff --git a/packages/futurist.nix b/packages/futurist.nix
@@ -9,7 +9,7 @@ let
     eventlet
     pbr
     prettytable
-    python-subunit
+    subunit
     stestr
     testscenarios
     testtools
@@ -20,6 +20,12 @@ python3Packages.buildPythonPackage rec {
   pname = "futurist";
   version = "3.0.0";
 
+  pyproject = true;
+  build-system = [
+    python3Packages.pbr
+    python3Packages.setuptools
+  ];
+
   nativeBuildInputs = [
     pbr
   ];
@@ -33,7 +39,7 @@ python3Packages.buildPythonPackage rec {
     eventlet
     oslotest
     prettytable
-    python-subunit
+    subunit
     testscenarios
     testtools
   ];

diff --git a/packages/gabbi.nix b/packages/gabbi.nix
@@ -25,6 +25,13 @@ python3Packages.buildPythonPackage rec {
   pname = "gabbi";
   version = "3.0.0";
 
+  pyproject = true;
+  build-system = [
+    python3Packages.pbr
+    python3Packages.setuptools
+  ];
+  pythonRelaxDeps = [ "urllib3" ];
+
   nativeBuildInputs = [
     pbr
   ];

diff --git a/packages/glance-store.nix b/packages/glance-store.nix
@@ -47,6 +47,10 @@ python3Packages.buildPythonPackage (rec {
   pname = "glance_store";
   version = "4.8.1";
   pyproject = true;
+  build-system = [
+    python3Packages.pbr
+    python3Packages.setuptools
+  ];
 
   nativeBuildInputs = [
     pbr