From 7e01372993c289c85ee9b6ebbe8ece9f84e9bbe6 Mon Sep 17 00:00:00 2001
From: CoreOS Bot <coreosbot@fedoraproject.org>
Date: Mon, 30 Oct 2023 12:36:29 +0000
Subject: [PATCH] tree: promote changes from testing at
 f9460a2167e5f10d95c1696faea9f7a96d1b83ab

---
 ci/buildroot/buildroot-reqs-aarch64.txt       |  1 +
 ci/buildroot/buildroot-reqs-ppc64le.txt       |  1 +
 ci/buildroot/buildroot-reqs-x86_64.txt        |  1 +
 ci/buildroot/buildroot-reqs.txt               |  2 +-
 ci/buildroot/install-buildroot.sh             | 15 ++-
 kola-denylist.yaml                            |  4 +-
 manifest-lock.aarch64.json                    | 94 +++++++++---------
 manifest-lock.overrides.yaml                  | 24 -----
 manifest-lock.ppc64le.json                    | 94 +++++++++---------
 manifest-lock.s390x.json                      | 84 ++++++++--------
 manifest-lock.x86_64.json                     | 96 +++++++++----------
 .../dracut/dracut.conf.d/coreos-omits.conf    |  3 +
 .../coreos-teardown-initramfs.service         | 14 +--
 .../coreos-teardown-initramfs.sh              | 61 +++++++++---
 tests/kola/docker/basic                       |  2 +
 tests/kola/upgrade/extended/test.sh           |  2 +-
 16 files changed, 266 insertions(+), 232 deletions(-)
 create mode 100644 ci/buildroot/buildroot-reqs-aarch64.txt
 create mode 100644 ci/buildroot/buildroot-reqs-ppc64le.txt
 create mode 100644 ci/buildroot/buildroot-reqs-x86_64.txt

diff --git a/ci/buildroot/buildroot-reqs-aarch64.txt b/ci/buildroot/buildroot-reqs-aarch64.txt
new file mode 100644
index 0000000000..080e3163df
--- /dev/null
+++ b/ci/buildroot/buildroot-reqs-aarch64.txt
@@ -0,0 +1 @@
+lld
diff --git a/ci/buildroot/buildroot-reqs-ppc64le.txt b/ci/buildroot/buildroot-reqs-ppc64le.txt
new file mode 100644
index 0000000000..080e3163df
--- /dev/null
+++ b/ci/buildroot/buildroot-reqs-ppc64le.txt
@@ -0,0 +1 @@
+lld
diff --git a/ci/buildroot/buildroot-reqs-x86_64.txt b/ci/buildroot/buildroot-reqs-x86_64.txt
new file mode 100644
index 0000000000..080e3163df
--- /dev/null
+++ b/ci/buildroot/buildroot-reqs-x86_64.txt
@@ -0,0 +1 @@
+lld
diff --git a/ci/buildroot/buildroot-reqs.txt b/ci/buildroot/buildroot-reqs.txt
index bf3db9c8bd..afe92d4b73 100644
--- a/ci/buildroot/buildroot-reqs.txt
+++ b/ci/buildroot/buildroot-reqs.txt
@@ -43,7 +43,7 @@ attr
 gjs
 
 # Also, add clang since it's useful at least in CI for C/C++ projects
-clang lld
+clang
 # And the tools such as clang-format, used for style checking
 clang-tools-extra
 # All C/C++ projects should have CI that uses the sanitizers
diff --git a/ci/buildroot/install-buildroot.sh b/ci/buildroot/install-buildroot.sh
index 6de1d78a57..eb4d84502d 100755
--- a/ci/buildroot/install-buildroot.sh
+++ b/ci/buildroot/install-buildroot.sh
@@ -6,14 +6,27 @@ set -euo pipefail
 dn=$(dirname "$0")
 tmpd=$(mktemp -d) && trap 'rm -rf ${tmpd}' EXIT
 
+arch=$(arch)
+
 echo "Installing base build requirements"
 dnf -y install /usr/bin/xargs 'dnf-command(builddep)'
 deps=$(grep -v '^#' "${dn}"/buildroot-reqs.txt)
+if [ -f "${dn}/buildroot-reqs-${arch}.txt" ]; then
+  deps+=" "
+  deps+=$(grep -v '^#' "${dn}/buildroot-reqs-${arch}.txt")
+fi
 echo "${deps}" | xargs dnf -y install
 
 echo "Installing build dependencies of primary packages"
 brs=$(grep -v '^#' "${dn}"/buildroot-buildreqs.txt)
-echo "${brs}" | xargs dnf -y builddep
+(cd "${tmpd}" && mkdir rpmbuild
+ echo "${brs}" | xargs dnf download --source
+ # rebuild the SRPM for this arch; see
+ # https://bugzilla.redhat.com/show_bug.cgi?id=1402784#c6
+ find . -name '*.src.rpm' -print0 | xargs -0n 1 rpmbuild -rs --nodeps \
+    -D "%_topdir $PWD/rpmbuild" -D "%_tmppath %{_topdir}/tmp"
+ dnf builddep -y rpmbuild/SRPMS/*.src.rpm)
+rm -rf "${tmpd:?}"/*
 
 echo "Installing build dependencies from canonical spec files"
 specs=$(grep -v '^#' "${dn}"/buildroot-specs.txt)
diff --git a/kola-denylist.yaml b/kola-denylist.yaml
index 64635362b2..ce8ceaef04 100644
--- a/kola-denylist.yaml
+++ b/kola-denylist.yaml
@@ -17,13 +17,13 @@
     - testing-devel
 - pattern: coreos.ignition.ssh.key
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1553
-  # snooze: 2023-10-13 (disabled on promotion)
+  # snooze: 2023-10-31 (disabled on promotion)
   # warn: true (disabled on promotion)
   platforms:
     - azure
 - pattern: ext.config.docker.basic
   tracker: https://github.com/coreos/fedora-coreos-tracker/issues/1578
-  # snooze: 2023-10-13 (disabled on promotion)
+  # snooze: 2023-10-31 (disabled on promotion)
   # warn: true (disabled on promotion)
   streams:
     - rawhide
diff --git a/manifest-lock.aarch64.json b/manifest-lock.aarch64.json
index 65c5d1b38c..8dbe4806df 100644
--- a/manifest-lock.aarch64.json
+++ b/manifest-lock.aarch64.json
@@ -19,7 +19,7 @@
       "evra": "2.9.0.4-1.fc38.noarch"
     },
     "aardvark-dns": {
-      "evra": "1.7.0-1.fc38.aarch64"
+      "evra": "1.8.0-1.fc38.aarch64"
     },
     "acl": {
       "evra": "2.3.1-6.fc38.aarch64"
@@ -100,7 +100,7 @@
       "evra": "1.19.1-1.fc38.aarch64"
     },
     "ca-certificates": {
-      "evra": "2023.2.60-2.fc38.noarch"
+      "evra": "2023.2.60_v7.0.306-1.0.fc38.noarch"
     },
     "catatonit": {
       "evra": "0.1.7-14.fc38.aarch64"
@@ -193,7 +193,7 @@
       "evra": "2.6.1-1.fc38.aarch64"
     },
     "curl": {
-      "evra": "8.0.1-4.fc38.aarch64"
+      "evra": "8.0.1-5.fc38.aarch64"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.28-9.fc38.aarch64"
@@ -244,13 +244,13 @@
       "evra": "4.2-6.fc38.aarch64"
     },
     "dracut": {
-      "evra": "059-3.fc38.aarch64"
+      "evra": "059-4.fc38.aarch64"
     },
     "dracut-network": {
-      "evra": "059-3.fc38.aarch64"
+      "evra": "059-4.fc38.aarch64"
     },
     "dracut-squash": {
-      "evra": "059-3.fc38.aarch64"
+      "evra": "059-4.fc38.aarch64"
     },
     "duktape": {
       "evra": "2.7.0-2.fc38.aarch64"
@@ -349,7 +349,7 @@
       "evra": "3.14.1-1.fc38.aarch64"
     },
     "fwupd": {
-      "evra": "1.9.5-1.fc38.aarch64"
+      "evra": "1.9.6-1.fc38.aarch64"
     },
     "gawk": {
       "evra": "5.1.1-5.fc38.aarch64"
@@ -376,16 +376,16 @@
       "evra": "2.76.5-2.fc38.aarch64"
     },
     "glibc": {
-      "evra": "2.37-5.fc38.aarch64"
+      "evra": "2.37-10.fc38.aarch64"
     },
     "glibc-common": {
-      "evra": "2.37-5.fc38.aarch64"
+      "evra": "2.37-10.fc38.aarch64"
     },
     "glibc-gconv-extra": {
-      "evra": "2.37-5.fc38.aarch64"
+      "evra": "2.37-10.fc38.aarch64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.37-5.fc38.aarch64"
+      "evra": "2.37-10.fc38.aarch64"
     },
     "gmp": {
       "evra": "1:6.2.1-4.fc38.aarch64"
@@ -397,7 +397,7 @@
       "evra": "3.8.1-1.fc38.aarch64"
     },
     "google-compute-engine-guest-configs-udev": {
-      "evra": "20230808.00-1.fc38.noarch"
+      "evra": "20230929.00-1.fc38.noarch"
     },
     "gpgme": {
       "evra": "1.17.1-5.fc38.aarch64"
@@ -406,19 +406,19 @@
       "evra": "3.8-3.fc38.aarch64"
     },
     "grub2-common": {
-      "evra": "1:2.06-100.fc38.noarch"
+      "evra": "1:2.06-102.fc38.noarch"
     },
     "grub2-efi-aa64": {
-      "evra": "1:2.06-100.fc38.aarch64"
+      "evra": "1:2.06-102.fc38.aarch64"
     },
     "grub2-tools": {
-      "evra": "1:2.06-100.fc38.aarch64"
+      "evra": "1:2.06-102.fc38.aarch64"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-100.fc38.aarch64"
+      "evra": "1:2.06-102.fc38.aarch64"
     },
     "gvisor-tap-vsock-gvforwarder": {
-      "evra": "6:0.7.0-6.fc38.aarch64"
+      "evra": "6:0.7.1-1.fc38.aarch64"
     },
     "gzip": {
       "evra": "1.12-3.fc38.aarch64"
@@ -505,16 +505,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.5.5-200.fc38.aarch64"
+      "evra": "6.5.6-200.fc38.aarch64"
     },
     "kernel-core": {
-      "evra": "6.5.5-200.fc38.aarch64"
+      "evra": "6.5.6-200.fc38.aarch64"
     },
     "kernel-modules": {
-      "evra": "6.5.5-200.fc38.aarch64"
+      "evra": "6.5.6-200.fc38.aarch64"
     },
     "kernel-modules-core": {
-      "evra": "6.5.5-200.fc38.aarch64"
+      "evra": "6.5.6-200.fc38.aarch64"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.aarch64"
@@ -556,7 +556,7 @@
       "evra": "2.5.6-1.fc38.aarch64"
     },
     "libatomic": {
-      "evra": "13.2.1-1.fc38.aarch64"
+      "evra": "13.2.1-4.fc38.aarch64"
     },
     "libattr": {
       "evra": "2.5.1-6.fc38.aarch64"
@@ -589,7 +589,7 @@
       "evra": "1.46.5-4.fc38.aarch64"
     },
     "libcurl-minimal": {
-      "evra": "8.0.1-4.fc38.aarch64"
+      "evra": "8.0.1-5.fc38.aarch64"
     },
     "libdaemon": {
       "evra": "0.14-25.fc38.aarch64"
@@ -622,7 +622,7 @@
       "evra": "1.5-2.fc38.aarch64"
     },
     "libgcc": {
-      "evra": "13.2.1-1.fc38.aarch64"
+      "evra": "13.2.1-4.fc38.aarch64"
     },
     "libgcrypt": {
       "evra": "1.10.2-1.fc38.aarch64"
@@ -691,7 +691,7 @@
       "evra": "1.8-5.fc38.aarch64"
     },
     "libnet": {
-      "evra": "1.2-7.fc38.aarch64"
+      "evra": "1.3-1.fc38.aarch64"
     },
     "libnetfilter_conntrack": {
       "evra": "1.0.9-1.fc38.aarch64"
@@ -739,7 +739,7 @@
       "evra": "0.1.5-53.fc38.aarch64"
     },
     "librepo": {
-      "evra": "1.15.2-1.fc38.aarch64"
+      "evra": "1.16.0-2.fc38.aarch64"
     },
     "libreport-filesystem": {
       "evra": "2.17.11-1.fc38.noarch"
@@ -769,10 +769,10 @@
       "evra": "2.38.1-4.fc38.aarch64"
     },
     "libsmbclient": {
-      "evra": "2:4.18.7-1.fc38.aarch64"
+      "evra": "2:4.18.8-1.fc38.aarch64"
     },
     "libsolv": {
-      "evra": "0.7.22-4.fc38.aarch64"
+      "evra": "0.7.25-1.fc38.aarch64"
     },
     "libss": {
       "evra": "1.46.5-4.fc38.aarch64"
@@ -790,7 +790,7 @@
       "evra": "2.9.1-1.fc38.aarch64"
     },
     "libstdc++": {
-      "evra": "13.2.1-1.fc38.aarch64"
+      "evra": "13.2.1-4.fc38.aarch64"
     },
     "libtalloc": {
       "evra": "2.4.0-2.fc38.aarch64"
@@ -838,7 +838,7 @@
       "evra": "0.3.2-5.fc38.aarch64"
     },
     "libwbclient": {
-      "evra": "2:4.18.7-1.fc38.aarch64"
+      "evra": "2:4.18.8-1.fc38.aarch64"
     },
     "libxcrypt": {
       "evra": "4.4.36-1.fc38.aarch64"
@@ -925,7 +925,7 @@
       "evra": "2.0-0.65.20160912git.fc38.aarch64"
     },
     "netavark": {
-      "evra": "1.7.0-1.fc38.aarch64"
+      "evra": "1.8.0-2.fc38.aarch64"
     },
     "nettle": {
       "evra": "3.8-3.fc38.aarch64"
@@ -955,7 +955,7 @@
       "evra": "20230919-1.fc38.noarch"
     },
     "nvme-cli": {
-      "evra": "2.4-2.fc38.aarch64"
+      "evra": "2.4-3.fc38.aarch64"
     },
     "oniguruma": {
       "evra": "6.9.8-2.D20220919gitb041f6d.fc38.1.aarch64"
@@ -1000,10 +1000,10 @@
       "evra": "1.5.2-16.fc38.aarch64"
     },
     "passt": {
-      "evra": "0^20230908.g05627dc-1.fc38.aarch64"
+      "evra": "0^20231004.gf851084-1.fc38.aarch64"
     },
     "passt-selinux": {
-      "evra": "0^20230908.g05627dc-1.fc38.noarch"
+      "evra": "0^20231004.gf851084-1.fc38.noarch"
     },
     "passwd": {
       "evra": "0.80-14.fc38.aarch64"
@@ -1078,10 +1078,10 @@
       "evra": "4.18.1-3.fc38.aarch64"
     },
     "rpm-ostree": {
-      "evra": "2023.7-1.fc38.aarch64"
+      "evra": "2023.8-2.fc38.aarch64"
     },
     "rpm-ostree-libs": {
-      "evra": "2023.7-1.fc38.aarch64"
+      "evra": "2023.8-2.fc38.aarch64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.18.1-3.fc38.aarch64"
@@ -1096,22 +1096,22 @@
       "evra": "2:1.1.8-1.fc38.aarch64"
     },
     "samba-client-libs": {
-      "evra": "2:4.18.7-1.fc38.aarch64"
+      "evra": "2:4.18.8-1.fc38.aarch64"
     },
     "samba-common": {
-      "evra": "2:4.18.7-1.fc38.noarch"
+      "evra": "2:4.18.8-1.fc38.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.18.7-1.fc38.aarch64"
+      "evra": "2:4.18.8-1.fc38.aarch64"
     },
     "sed": {
       "evra": "4.8-12.fc38.aarch64"
     },
     "selinux-policy": {
-      "evra": "38.28-1.fc38.noarch"
+      "evra": "38.29-1.fc38.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "38.28-1.fc38.noarch"
+      "evra": "38.29-1.fc38.noarch"
     },
     "setup": {
       "evra": "2.14.3-2.fc38.noarch"
@@ -1237,10 +1237,10 @@
       "evra": "2.38.1-4.fc38.aarch64"
     },
     "vim-data": {
-      "evra": "2:9.0.1927-1.fc38.noarch"
+      "evra": "2:9.0.1984-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1927-1.fc38.aarch64"
+      "evra": "2:9.0.1984-1.fc38.aarch64"
     },
     "which": {
       "evra": "2.21-39.fc38.aarch64"
@@ -1264,7 +1264,7 @@
       "evra": "2.1.0-21.fc38.aarch64"
     },
     "zchunk-libs": {
-      "evra": "1.3.1-1.fc38.aarch64"
+      "evra": "1.3.2-1.fc38.aarch64"
     },
     "zincati": {
       "evra": "0.0.25-4.fc38.aarch64"
@@ -1280,16 +1280,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-10-02T00:00:00Z",
+    "generated": "2023-10-14T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:48Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-10-01T23:23:09Z"
+        "generated": "2023-10-14T02:09:06Z"
       },
       "fedora-updates": {
-        "generated": "2023-10-02T01:19:32Z"
+        "generated": "2023-10-14T01:22:50Z"
       }
     }
   }
diff --git a/manifest-lock.overrides.yaml b/manifest-lock.overrides.yaml
index 696f71ffab..1d1ec562ab 100644
--- a/manifest-lock.overrides.yaml
+++ b/manifest-lock.overrides.yaml
@@ -9,30 +9,6 @@
 # for FCOS-specific packages (ignition, afterburn, etc.).
 
 packages:
-  glibc:
-    evr: 2.37-10.fc38
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-2b8c11ee75
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1591
-      type: fast-track
-  glibc-common:
-    evr: 2.37-10.fc38
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-2b8c11ee75
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1591
-      type: fast-track
-  glibc-gconv-extra:
-    evr: 2.37-10.fc38
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-2b8c11ee75
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1591
-      type: fast-track
-  glibc-minimal-langpack:
-    evr: 2.37-10.fc38
-    metadata:
-      bodhi: https://bodhi.fedoraproject.org/updates/FEDORA-2023-2b8c11ee75
-      reason: https://github.com/coreos/fedora-coreos-tracker/issues/1591
-      type: fast-track
   moby-engine:
     evr: 20.10.23-1.fc38
     metadata:
diff --git a/manifest-lock.ppc64le.json b/manifest-lock.ppc64le.json
index d85f14fcf9..f20dbb8165 100644
--- a/manifest-lock.ppc64le.json
+++ b/manifest-lock.ppc64le.json
@@ -19,7 +19,7 @@
       "evra": "2.9.0.4-1.fc38.noarch"
     },
     "aardvark-dns": {
-      "evra": "1.7.0-1.fc38.ppc64le"
+      "evra": "1.8.0-1.fc38.ppc64le"
     },
     "acl": {
       "evra": "2.3.1-6.fc38.ppc64le"
@@ -100,7 +100,7 @@
       "evra": "1.19.1-1.fc38.ppc64le"
     },
     "ca-certificates": {
-      "evra": "2023.2.60-2.fc38.noarch"
+      "evra": "2023.2.60_v7.0.306-1.0.fc38.noarch"
     },
     "catatonit": {
       "evra": "0.1.7-14.fc38.ppc64le"
@@ -193,7 +193,7 @@
       "evra": "2.6.1-1.fc38.ppc64le"
     },
     "curl": {
-      "evra": "8.0.1-4.fc38.ppc64le"
+      "evra": "8.0.1-5.fc38.ppc64le"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.28-9.fc38.ppc64le"
@@ -244,13 +244,13 @@
       "evra": "4.2-6.fc38.ppc64le"
     },
     "dracut": {
-      "evra": "059-3.fc38.ppc64le"
+      "evra": "059-4.fc38.ppc64le"
     },
     "dracut-network": {
-      "evra": "059-3.fc38.ppc64le"
+      "evra": "059-4.fc38.ppc64le"
     },
     "dracut-squash": {
-      "evra": "059-3.fc38.ppc64le"
+      "evra": "059-4.fc38.ppc64le"
     },
     "duktape": {
       "evra": "2.7.0-2.fc38.ppc64le"
@@ -340,7 +340,7 @@
       "evra": "3.14.1-1.fc38.ppc64le"
     },
     "fwupd": {
-      "evra": "1.9.5-1.fc38.ppc64le"
+      "evra": "1.9.6-1.fc38.ppc64le"
     },
     "gawk": {
       "evra": "5.1.1-5.fc38.ppc64le"
@@ -367,16 +367,16 @@
       "evra": "2.76.5-2.fc38.ppc64le"
     },
     "glibc": {
-      "evra": "2.37-5.fc38.ppc64le"
+      "evra": "2.37-10.fc38.ppc64le"
     },
     "glibc-common": {
-      "evra": "2.37-5.fc38.ppc64le"
+      "evra": "2.37-10.fc38.ppc64le"
     },
     "glibc-gconv-extra": {
-      "evra": "2.37-5.fc38.ppc64le"
+      "evra": "2.37-10.fc38.ppc64le"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.37-5.fc38.ppc64le"
+      "evra": "2.37-10.fc38.ppc64le"
     },
     "gmp": {
       "evra": "1:6.2.1-4.fc38.ppc64le"
@@ -394,22 +394,22 @@
       "evra": "3.8-3.fc38.ppc64le"
     },
     "grub2-common": {
-      "evra": "1:2.06-100.fc38.noarch"
+      "evra": "1:2.06-102.fc38.noarch"
     },
     "grub2-ppc64le": {
-      "evra": "1:2.06-100.fc38.ppc64le"
+      "evra": "1:2.06-102.fc38.ppc64le"
     },
     "grub2-ppc64le-modules": {
-      "evra": "1:2.06-100.fc38.noarch"
+      "evra": "1:2.06-102.fc38.noarch"
     },
     "grub2-tools": {
-      "evra": "1:2.06-100.fc38.ppc64le"
+      "evra": "1:2.06-102.fc38.ppc64le"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-100.fc38.ppc64le"
+      "evra": "1:2.06-102.fc38.ppc64le"
     },
     "gvisor-tap-vsock-gvforwarder": {
-      "evra": "6:0.7.0-6.fc38.ppc64le"
+      "evra": "6:0.7.1-1.fc38.ppc64le"
     },
     "gzip": {
       "evra": "1.12-3.fc38.ppc64le"
@@ -496,16 +496,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.5.5-200.fc38.ppc64le"
+      "evra": "6.5.6-200.fc38.ppc64le"
     },
     "kernel-core": {
-      "evra": "6.5.5-200.fc38.ppc64le"
+      "evra": "6.5.6-200.fc38.ppc64le"
     },
     "kernel-modules": {
-      "evra": "6.5.5-200.fc38.ppc64le"
+      "evra": "6.5.6-200.fc38.ppc64le"
     },
     "kernel-modules-core": {
-      "evra": "6.5.5-200.fc38.ppc64le"
+      "evra": "6.5.6-200.fc38.ppc64le"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.ppc64le"
@@ -547,7 +547,7 @@
       "evra": "2.5.6-1.fc38.ppc64le"
     },
     "libatomic": {
-      "evra": "13.2.1-1.fc38.ppc64le"
+      "evra": "13.2.1-4.fc38.ppc64le"
     },
     "libattr": {
       "evra": "2.5.1-6.fc38.ppc64le"
@@ -580,7 +580,7 @@
       "evra": "1.46.5-4.fc38.ppc64le"
     },
     "libcurl-minimal": {
-      "evra": "8.0.1-4.fc38.ppc64le"
+      "evra": "8.0.1-5.fc38.ppc64le"
     },
     "libdaemon": {
       "evra": "0.14-25.fc38.ppc64le"
@@ -613,7 +613,7 @@
       "evra": "1.5-2.fc38.ppc64le"
     },
     "libgcc": {
-      "evra": "13.2.1-1.fc38.ppc64le"
+      "evra": "13.2.1-4.fc38.ppc64le"
     },
     "libgcrypt": {
       "evra": "1.10.2-1.fc38.ppc64le"
@@ -682,7 +682,7 @@
       "evra": "1.8-5.fc38.ppc64le"
     },
     "libnet": {
-      "evra": "1.2-7.fc38.ppc64le"
+      "evra": "1.3-1.fc38.ppc64le"
     },
     "libnetfilter_conntrack": {
       "evra": "1.0.9-1.fc38.ppc64le"
@@ -730,7 +730,7 @@
       "evra": "0.1.5-53.fc38.ppc64le"
     },
     "librepo": {
-      "evra": "1.15.2-1.fc38.ppc64le"
+      "evra": "1.16.0-2.fc38.ppc64le"
     },
     "libreport-filesystem": {
       "evra": "2.17.11-1.fc38.noarch"
@@ -766,10 +766,10 @@
       "evra": "2.38.1-4.fc38.ppc64le"
     },
     "libsmbclient": {
-      "evra": "2:4.18.7-1.fc38.ppc64le"
+      "evra": "2:4.18.8-1.fc38.ppc64le"
     },
     "libsolv": {
-      "evra": "0.7.22-4.fc38.ppc64le"
+      "evra": "0.7.25-1.fc38.ppc64le"
     },
     "libss": {
       "evra": "1.46.5-4.fc38.ppc64le"
@@ -787,7 +787,7 @@
       "evra": "2.9.1-1.fc38.ppc64le"
     },
     "libstdc++": {
-      "evra": "13.2.1-1.fc38.ppc64le"
+      "evra": "13.2.1-4.fc38.ppc64le"
     },
     "libtalloc": {
       "evra": "2.4.0-2.fc38.ppc64le"
@@ -835,7 +835,7 @@
       "evra": "0.3.2-5.fc38.ppc64le"
     },
     "libwbclient": {
-      "evra": "2:4.18.7-1.fc38.ppc64le"
+      "evra": "2:4.18.8-1.fc38.ppc64le"
     },
     "libxcrypt": {
       "evra": "4.4.36-1.fc38.ppc64le"
@@ -919,7 +919,7 @@
       "evra": "2.0-0.65.20160912git.fc38.ppc64le"
     },
     "netavark": {
-      "evra": "1.7.0-1.fc38.ppc64le"
+      "evra": "1.8.0-2.fc38.ppc64le"
     },
     "nettle": {
       "evra": "3.8-3.fc38.ppc64le"
@@ -949,7 +949,7 @@
       "evra": "20230919-1.fc38.noarch"
     },
     "nvme-cli": {
-      "evra": "2.4-2.fc38.ppc64le"
+      "evra": "2.4-3.fc38.ppc64le"
     },
     "oniguruma": {
       "evra": "6.9.8-2.D20220919gitb041f6d.fc38.1.ppc64le"
@@ -997,10 +997,10 @@
       "evra": "1.5.2-16.fc38.ppc64le"
     },
     "passt": {
-      "evra": "0^20230908.g05627dc-1.fc38.ppc64le"
+      "evra": "0^20231004.gf851084-1.fc38.ppc64le"
     },
     "passt-selinux": {
-      "evra": "0^20230908.g05627dc-1.fc38.noarch"
+      "evra": "0^20231004.gf851084-1.fc38.noarch"
     },
     "passwd": {
       "evra": "0.80-14.fc38.ppc64le"
@@ -1081,10 +1081,10 @@
       "evra": "4.18.1-3.fc38.ppc64le"
     },
     "rpm-ostree": {
-      "evra": "2023.7-1.fc38.ppc64le"
+      "evra": "2023.8-2.fc38.ppc64le"
     },
     "rpm-ostree-libs": {
-      "evra": "2023.7-1.fc38.ppc64le"
+      "evra": "2023.8-2.fc38.ppc64le"
     },
     "rpm-plugin-selinux": {
       "evra": "4.18.1-3.fc38.ppc64le"
@@ -1099,22 +1099,22 @@
       "evra": "2:1.1.8-1.fc38.ppc64le"
     },
     "samba-client-libs": {
-      "evra": "2:4.18.7-1.fc38.ppc64le"
+      "evra": "2:4.18.8-1.fc38.ppc64le"
     },
     "samba-common": {
-      "evra": "2:4.18.7-1.fc38.noarch"
+      "evra": "2:4.18.8-1.fc38.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.18.7-1.fc38.ppc64le"
+      "evra": "2:4.18.8-1.fc38.ppc64le"
     },
     "sed": {
       "evra": "4.8-12.fc38.ppc64le"
     },
     "selinux-policy": {
-      "evra": "38.28-1.fc38.noarch"
+      "evra": "38.29-1.fc38.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "38.28-1.fc38.noarch"
+      "evra": "38.29-1.fc38.noarch"
     },
     "servicelog": {
       "evra": "1.1.16-3.fc38.ppc64le"
@@ -1240,10 +1240,10 @@
       "evra": "2.38.1-4.fc38.ppc64le"
     },
     "vim-data": {
-      "evra": "2:9.0.1927-1.fc38.noarch"
+      "evra": "2:9.0.1984-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1927-1.fc38.ppc64le"
+      "evra": "2:9.0.1984-1.fc38.ppc64le"
     },
     "which": {
       "evra": "2.21-39.fc38.ppc64le"
@@ -1267,7 +1267,7 @@
       "evra": "2.1.0-21.fc38.ppc64le"
     },
     "zchunk-libs": {
-      "evra": "1.3.1-1.fc38.ppc64le"
+      "evra": "1.3.2-1.fc38.ppc64le"
     },
     "zincati": {
       "evra": "0.0.25-4.fc38.ppc64le"
@@ -1283,16 +1283,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-10-02T00:00:00Z",
+    "generated": "2023-10-14T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:47Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-10-01T23:23:25Z"
+        "generated": "2023-10-14T02:06:57Z"
       },
       "fedora-updates": {
-        "generated": "2023-10-02T01:19:39Z"
+        "generated": "2023-10-14T01:22:58Z"
       }
     }
   }
diff --git a/manifest-lock.s390x.json b/manifest-lock.s390x.json
index 680365a856..dd45b2d485 100644
--- a/manifest-lock.s390x.json
+++ b/manifest-lock.s390x.json
@@ -19,7 +19,7 @@
       "evra": "2.9.0.4-1.fc38.noarch"
     },
     "aardvark-dns": {
-      "evra": "1.7.0-1.fc38.s390x"
+      "evra": "1.8.0-1.fc38.s390x"
     },
     "acl": {
       "evra": "2.3.1-6.fc38.s390x"
@@ -97,7 +97,7 @@
       "evra": "1.19.1-1.fc38.s390x"
     },
     "ca-certificates": {
-      "evra": "2023.2.60-2.fc38.noarch"
+      "evra": "2023.2.60_v7.0.306-1.0.fc38.noarch"
     },
     "catatonit": {
       "evra": "0.1.7-14.fc38.s390x"
@@ -190,7 +190,7 @@
       "evra": "2.6.1-1.fc38.s390x"
     },
     "curl": {
-      "evra": "8.0.1-4.fc38.s390x"
+      "evra": "8.0.1-5.fc38.s390x"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.28-9.fc38.s390x"
@@ -241,13 +241,13 @@
       "evra": "4.2-6.fc38.s390x"
     },
     "dracut": {
-      "evra": "059-3.fc38.s390x"
+      "evra": "059-4.fc38.s390x"
     },
     "dracut-network": {
-      "evra": "059-3.fc38.s390x"
+      "evra": "059-4.fc38.s390x"
     },
     "dracut-squash": {
-      "evra": "059-3.fc38.s390x"
+      "evra": "059-4.fc38.s390x"
     },
     "duktape": {
       "evra": "2.7.0-2.fc38.s390x"
@@ -337,7 +337,7 @@
       "evra": "3.14.1-1.fc38.s390x"
     },
     "fwupd": {
-      "evra": "1.9.5-1.fc38.s390x"
+      "evra": "1.9.6-1.fc38.s390x"
     },
     "gawk": {
       "evra": "5.1.1-5.fc38.s390x"
@@ -355,16 +355,16 @@
       "evra": "2.76.5-2.fc38.s390x"
     },
     "glibc": {
-      "evra": "2.37-5.fc38.s390x"
+      "evra": "2.37-10.fc38.s390x"
     },
     "glibc-common": {
-      "evra": "2.37-5.fc38.s390x"
+      "evra": "2.37-10.fc38.s390x"
     },
     "glibc-gconv-extra": {
-      "evra": "2.37-5.fc38.s390x"
+      "evra": "2.37-10.fc38.s390x"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.37-5.fc38.s390x"
+      "evra": "2.37-10.fc38.s390x"
     },
     "gmp": {
       "evra": "1:6.2.1-4.fc38.s390x"
@@ -382,7 +382,7 @@
       "evra": "3.8-3.fc38.s390x"
     },
     "gvisor-tap-vsock-gvforwarder": {
-      "evra": "6:0.7.0-6.fc38.s390x"
+      "evra": "6:0.7.1-1.fc38.s390x"
     },
     "gzip": {
       "evra": "1.12-3.fc38.s390x"
@@ -466,16 +466,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.5.5-200.fc38.s390x"
+      "evra": "6.5.6-200.fc38.s390x"
     },
     "kernel-core": {
-      "evra": "6.5.5-200.fc38.s390x"
+      "evra": "6.5.6-200.fc38.s390x"
     },
     "kernel-modules": {
-      "evra": "6.5.5-200.fc38.s390x"
+      "evra": "6.5.6-200.fc38.s390x"
     },
     "kernel-modules-core": {
-      "evra": "6.5.5-200.fc38.s390x"
+      "evra": "6.5.6-200.fc38.s390x"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.s390x"
@@ -517,7 +517,7 @@
       "evra": "2.5.6-1.fc38.s390x"
     },
     "libatomic": {
-      "evra": "13.2.1-1.fc38.s390x"
+      "evra": "13.2.1-4.fc38.s390x"
     },
     "libattr": {
       "evra": "2.5.1-6.fc38.s390x"
@@ -550,7 +550,7 @@
       "evra": "1.46.5-4.fc38.s390x"
     },
     "libcurl-minimal": {
-      "evra": "8.0.1-4.fc38.s390x"
+      "evra": "8.0.1-5.fc38.s390x"
     },
     "libdaemon": {
       "evra": "0.14-25.fc38.s390x"
@@ -583,7 +583,7 @@
       "evra": "1.5-2.fc38.s390x"
     },
     "libgcc": {
-      "evra": "13.2.1-1.fc38.s390x"
+      "evra": "13.2.1-4.fc38.s390x"
     },
     "libgcrypt": {
       "evra": "1.10.2-1.fc38.s390x"
@@ -652,7 +652,7 @@
       "evra": "1.8-5.fc38.s390x"
     },
     "libnet": {
-      "evra": "1.2-7.fc38.s390x"
+      "evra": "1.3-1.fc38.s390x"
     },
     "libnetfilter_conntrack": {
       "evra": "1.0.9-1.fc38.s390x"
@@ -700,7 +700,7 @@
       "evra": "0.1.5-53.fc38.s390x"
     },
     "librepo": {
-      "evra": "1.15.2-1.fc38.s390x"
+      "evra": "1.16.0-2.fc38.s390x"
     },
     "libreport-filesystem": {
       "evra": "2.17.11-1.fc38.noarch"
@@ -730,10 +730,10 @@
       "evra": "2.38.1-4.fc38.s390x"
     },
     "libsmbclient": {
-      "evra": "2:4.18.7-1.fc38.s390x"
+      "evra": "2:4.18.8-1.fc38.s390x"
     },
     "libsolv": {
-      "evra": "0.7.22-4.fc38.s390x"
+      "evra": "0.7.25-1.fc38.s390x"
     },
     "libss": {
       "evra": "1.46.5-4.fc38.s390x"
@@ -751,7 +751,7 @@
       "evra": "2.9.1-1.fc38.s390x"
     },
     "libstdc++": {
-      "evra": "13.2.1-1.fc38.s390x"
+      "evra": "13.2.1-4.fc38.s390x"
     },
     "libtalloc": {
       "evra": "2.4.0-2.fc38.s390x"
@@ -799,7 +799,7 @@
       "evra": "0.3.2-5.fc38.s390x"
     },
     "libwbclient": {
-      "evra": "2:4.18.7-1.fc38.s390x"
+      "evra": "2:4.18.8-1.fc38.s390x"
     },
     "libxcrypt": {
       "evra": "4.4.36-1.fc38.s390x"
@@ -883,7 +883,7 @@
       "evra": "2.0-0.65.20160912git.fc38.s390x"
     },
     "netavark": {
-      "evra": "1.7.0-1.fc38.s390x"
+      "evra": "1.8.0-2.fc38.s390x"
     },
     "nettle": {
       "evra": "3.8-3.fc38.s390x"
@@ -910,7 +910,7 @@
       "evra": "20230919-1.fc38.noarch"
     },
     "nvme-cli": {
-      "evra": "2.4-2.fc38.s390x"
+      "evra": "2.4-3.fc38.s390x"
     },
     "oniguruma": {
       "evra": "6.9.8-2.D20220919gitb041f6d.fc38.1.s390x"
@@ -952,10 +952,10 @@
       "evra": "1.5.2-16.fc38.s390x"
     },
     "passt": {
-      "evra": "0^20230908.g05627dc-1.fc38.s390x"
+      "evra": "0^20231004.gf851084-1.fc38.s390x"
     },
     "passt-selinux": {
-      "evra": "0^20230908.g05627dc-1.fc38.noarch"
+      "evra": "0^20231004.gf851084-1.fc38.noarch"
     },
     "passwd": {
       "evra": "0.80-14.fc38.s390x"
@@ -1030,10 +1030,10 @@
       "evra": "4.18.1-3.fc38.s390x"
     },
     "rpm-ostree": {
-      "evra": "2023.7-1.fc38.s390x"
+      "evra": "2023.8-2.fc38.s390x"
     },
     "rpm-ostree-libs": {
-      "evra": "2023.7-1.fc38.s390x"
+      "evra": "2023.8-2.fc38.s390x"
     },
     "rpm-plugin-selinux": {
       "evra": "4.18.1-3.fc38.s390x"
@@ -1051,22 +1051,22 @@
       "evra": "2:2.25.0-4.fc38.s390x"
     },
     "samba-client-libs": {
-      "evra": "2:4.18.7-1.fc38.s390x"
+      "evra": "2:4.18.8-1.fc38.s390x"
     },
     "samba-common": {
-      "evra": "2:4.18.7-1.fc38.noarch"
+      "evra": "2:4.18.8-1.fc38.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.18.7-1.fc38.s390x"
+      "evra": "2:4.18.8-1.fc38.s390x"
     },
     "sed": {
       "evra": "4.8-12.fc38.s390x"
     },
     "selinux-policy": {
-      "evra": "38.28-1.fc38.noarch"
+      "evra": "38.29-1.fc38.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "38.28-1.fc38.noarch"
+      "evra": "38.29-1.fc38.noarch"
     },
     "setup": {
       "evra": "2.14.3-2.fc38.noarch"
@@ -1192,10 +1192,10 @@
       "evra": "2.6.1-1.fc38.s390x"
     },
     "vim-data": {
-      "evra": "2:9.0.1927-1.fc38.noarch"
+      "evra": "2:9.0.1984-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1927-1.fc38.s390x"
+      "evra": "2:9.0.1984-1.fc38.s390x"
     },
     "which": {
       "evra": "2.21-39.fc38.s390x"
@@ -1219,7 +1219,7 @@
       "evra": "2.1.0-21.fc38.s390x"
     },
     "zchunk-libs": {
-      "evra": "1.3.1-1.fc38.s390x"
+      "evra": "1.3.2-1.fc38.s390x"
     },
     "zincati": {
       "evra": "0.0.25-4.fc38.s390x"
@@ -1235,16 +1235,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-10-02T00:00:00Z",
+    "generated": "2023-10-14T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:36:40Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-10-01T23:22:17Z"
+        "generated": "2023-10-14T02:07:15Z"
       },
       "fedora-updates": {
-        "generated": "2023-10-02T01:19:47Z"
+        "generated": "2023-10-14T01:23:06Z"
       }
     }
   }
diff --git a/manifest-lock.x86_64.json b/manifest-lock.x86_64.json
index 7674d61e68..2b4de7d87e 100644
--- a/manifest-lock.x86_64.json
+++ b/manifest-lock.x86_64.json
@@ -19,7 +19,7 @@
       "evra": "2.9.0.4-1.fc38.noarch"
     },
     "aardvark-dns": {
-      "evra": "1.7.0-1.fc38.x86_64"
+      "evra": "1.8.0-1.fc38.x86_64"
     },
     "acl": {
       "evra": "2.3.1-6.fc38.x86_64"
@@ -100,7 +100,7 @@
       "evra": "1.19.1-1.fc38.x86_64"
     },
     "ca-certificates": {
-      "evra": "2023.2.60-2.fc38.noarch"
+      "evra": "2023.2.60_v7.0.306-1.0.fc38.noarch"
     },
     "catatonit": {
       "evra": "0.1.7-14.fc38.x86_64"
@@ -193,7 +193,7 @@
       "evra": "2.6.1-1.fc38.x86_64"
     },
     "curl": {
-      "evra": "8.0.1-4.fc38.x86_64"
+      "evra": "8.0.1-5.fc38.x86_64"
     },
     "cyrus-sasl-gssapi": {
       "evra": "2.1.28-9.fc38.x86_64"
@@ -244,13 +244,13 @@
       "evra": "4.2-6.fc38.x86_64"
     },
     "dracut": {
-      "evra": "059-3.fc38.x86_64"
+      "evra": "059-4.fc38.x86_64"
     },
     "dracut-network": {
-      "evra": "059-3.fc38.x86_64"
+      "evra": "059-4.fc38.x86_64"
     },
     "dracut-squash": {
-      "evra": "059-3.fc38.x86_64"
+      "evra": "059-4.fc38.x86_64"
     },
     "duktape": {
       "evra": "2.7.0-2.fc38.x86_64"
@@ -349,7 +349,7 @@
       "evra": "3.14.1-1.fc38.x86_64"
     },
     "fwupd": {
-      "evra": "1.9.5-1.fc38.x86_64"
+      "evra": "1.9.6-1.fc38.x86_64"
     },
     "gawk": {
       "evra": "5.1.1-5.fc38.x86_64"
@@ -376,16 +376,16 @@
       "evra": "2.76.5-2.fc38.x86_64"
     },
     "glibc": {
-      "evra": "2.37-5.fc38.x86_64"
+      "evra": "2.37-10.fc38.x86_64"
     },
     "glibc-common": {
-      "evra": "2.37-5.fc38.x86_64"
+      "evra": "2.37-10.fc38.x86_64"
     },
     "glibc-gconv-extra": {
-      "evra": "2.37-5.fc38.x86_64"
+      "evra": "2.37-10.fc38.x86_64"
     },
     "glibc-minimal-langpack": {
-      "evra": "2.37-5.fc38.x86_64"
+      "evra": "2.37-10.fc38.x86_64"
     },
     "gmp": {
       "evra": "1:6.2.1-4.fc38.x86_64"
@@ -397,7 +397,7 @@
       "evra": "3.8.1-1.fc38.x86_64"
     },
     "google-compute-engine-guest-configs-udev": {
-      "evra": "20230808.00-1.fc38.noarch"
+      "evra": "20230929.00-1.fc38.noarch"
     },
     "gpgme": {
       "evra": "1.17.1-5.fc38.x86_64"
@@ -406,25 +406,25 @@
       "evra": "3.8-3.fc38.x86_64"
     },
     "grub2-common": {
-      "evra": "1:2.06-100.fc38.noarch"
+      "evra": "1:2.06-102.fc38.noarch"
     },
     "grub2-efi-x64": {
-      "evra": "1:2.06-100.fc38.x86_64"
+      "evra": "1:2.06-102.fc38.x86_64"
     },
     "grub2-pc": {
-      "evra": "1:2.06-100.fc38.x86_64"
+      "evra": "1:2.06-102.fc38.x86_64"
     },
     "grub2-pc-modules": {
-      "evra": "1:2.06-100.fc38.noarch"
+      "evra": "1:2.06-102.fc38.noarch"
     },
     "grub2-tools": {
-      "evra": "1:2.06-100.fc38.x86_64"
+      "evra": "1:2.06-102.fc38.x86_64"
     },
     "grub2-tools-minimal": {
-      "evra": "1:2.06-100.fc38.x86_64"
+      "evra": "1:2.06-102.fc38.x86_64"
     },
     "gvisor-tap-vsock-gvforwarder": {
-      "evra": "6:0.7.0-6.fc38.x86_64"
+      "evra": "6:0.7.1-1.fc38.x86_64"
     },
     "gzip": {
       "evra": "1.12-3.fc38.x86_64"
@@ -511,16 +511,16 @@
       "evra": "2.5.1-5.fc38.noarch"
     },
     "kernel": {
-      "evra": "6.5.5-200.fc38.x86_64"
+      "evra": "6.5.6-200.fc38.x86_64"
     },
     "kernel-core": {
-      "evra": "6.5.5-200.fc38.x86_64"
+      "evra": "6.5.6-200.fc38.x86_64"
     },
     "kernel-modules": {
-      "evra": "6.5.5-200.fc38.x86_64"
+      "evra": "6.5.6-200.fc38.x86_64"
     },
     "kernel-modules-core": {
-      "evra": "6.5.5-200.fc38.x86_64"
+      "evra": "6.5.6-200.fc38.x86_64"
     },
     "kexec-tools": {
       "evra": "2.0.26-3.fc38.x86_64"
@@ -592,7 +592,7 @@
       "evra": "1.46.5-4.fc38.x86_64"
     },
     "libcurl-minimal": {
-      "evra": "8.0.1-4.fc38.x86_64"
+      "evra": "8.0.1-5.fc38.x86_64"
     },
     "libdaemon": {
       "evra": "0.14-25.fc38.x86_64"
@@ -625,7 +625,7 @@
       "evra": "1.5-2.fc38.x86_64"
     },
     "libgcc": {
-      "evra": "13.2.1-1.fc38.x86_64"
+      "evra": "13.2.1-4.fc38.x86_64"
     },
     "libgcrypt": {
       "evra": "1.10.2-1.fc38.x86_64"
@@ -694,7 +694,7 @@
       "evra": "1.8-5.fc38.x86_64"
     },
     "libnet": {
-      "evra": "1.2-7.fc38.x86_64"
+      "evra": "1.3-1.fc38.x86_64"
     },
     "libnetfilter_conntrack": {
       "evra": "1.0.9-1.fc38.x86_64"
@@ -742,7 +742,7 @@
       "evra": "0.1.5-53.fc38.x86_64"
     },
     "librepo": {
-      "evra": "1.15.2-1.fc38.x86_64"
+      "evra": "1.16.0-2.fc38.x86_64"
     },
     "libreport-filesystem": {
       "evra": "2.17.11-1.fc38.noarch"
@@ -772,10 +772,10 @@
       "evra": "2.38.1-4.fc38.x86_64"
     },
     "libsmbclient": {
-      "evra": "2:4.18.7-1.fc38.x86_64"
+      "evra": "2:4.18.8-1.fc38.x86_64"
     },
     "libsolv": {
-      "evra": "0.7.22-4.fc38.x86_64"
+      "evra": "0.7.25-1.fc38.x86_64"
     },
     "libss": {
       "evra": "1.46.5-4.fc38.x86_64"
@@ -793,7 +793,7 @@
       "evra": "2.9.1-1.fc38.x86_64"
     },
     "libstdc++": {
-      "evra": "13.2.1-1.fc38.x86_64"
+      "evra": "13.2.1-4.fc38.x86_64"
     },
     "libtalloc": {
       "evra": "2.4.0-2.fc38.x86_64"
@@ -841,7 +841,7 @@
       "evra": "0.3.2-5.fc38.x86_64"
     },
     "libwbclient": {
-      "evra": "2:4.18.7-1.fc38.x86_64"
+      "evra": "2:4.18.8-1.fc38.x86_64"
     },
     "libxcrypt": {
       "evra": "4.4.36-1.fc38.x86_64"
@@ -931,7 +931,7 @@
       "evra": "2.0-0.65.20160912git.fc38.x86_64"
     },
     "netavark": {
-      "evra": "1.7.0-1.fc38.x86_64"
+      "evra": "1.8.0-2.fc38.x86_64"
     },
     "nettle": {
       "evra": "3.8-3.fc38.x86_64"
@@ -961,7 +961,7 @@
       "evra": "20230919-1.fc38.noarch"
     },
     "nvme-cli": {
-      "evra": "2.4-2.fc38.x86_64"
+      "evra": "2.4-3.fc38.x86_64"
     },
     "oniguruma": {
       "evra": "6.9.8-2.D20220919gitb041f6d.fc38.1.x86_64"
@@ -1006,10 +1006,10 @@
       "evra": "1.5.2-16.fc38.x86_64"
     },
     "passt": {
-      "evra": "0^20230908.g05627dc-1.fc38.x86_64"
+      "evra": "0^20231004.gf851084-1.fc38.x86_64"
     },
     "passt-selinux": {
-      "evra": "0^20230908.g05627dc-1.fc38.noarch"
+      "evra": "0^20231004.gf851084-1.fc38.noarch"
     },
     "passwd": {
       "evra": "0.80-14.fc38.x86_64"
@@ -1081,10 +1081,10 @@
       "evra": "4.18.1-3.fc38.x86_64"
     },
     "rpm-ostree": {
-      "evra": "2023.7-1.fc38.x86_64"
+      "evra": "2023.8-2.fc38.x86_64"
     },
     "rpm-ostree-libs": {
-      "evra": "2023.7-1.fc38.x86_64"
+      "evra": "2023.8-2.fc38.x86_64"
     },
     "rpm-plugin-selinux": {
       "evra": "4.18.1-3.fc38.x86_64"
@@ -1099,22 +1099,22 @@
       "evra": "2:1.1.8-1.fc38.x86_64"
     },
     "samba-client-libs": {
-      "evra": "2:4.18.7-1.fc38.x86_64"
+      "evra": "2:4.18.8-1.fc38.x86_64"
     },
     "samba-common": {
-      "evra": "2:4.18.7-1.fc38.noarch"
+      "evra": "2:4.18.8-1.fc38.noarch"
     },
     "samba-common-libs": {
-      "evra": "2:4.18.7-1.fc38.x86_64"
+      "evra": "2:4.18.8-1.fc38.x86_64"
     },
     "sed": {
       "evra": "4.8-12.fc38.x86_64"
     },
     "selinux-policy": {
-      "evra": "38.28-1.fc38.noarch"
+      "evra": "38.29-1.fc38.noarch"
     },
     "selinux-policy-targeted": {
-      "evra": "38.28-1.fc38.noarch"
+      "evra": "38.29-1.fc38.noarch"
     },
     "setup": {
       "evra": "2.14.3-2.fc38.noarch"
@@ -1240,10 +1240,10 @@
       "evra": "2.38.1-4.fc38.x86_64"
     },
     "vim-data": {
-      "evra": "2:9.0.1927-1.fc38.noarch"
+      "evra": "2:9.0.1984-1.fc38.noarch"
     },
     "vim-minimal": {
-      "evra": "2:9.0.1927-1.fc38.x86_64"
+      "evra": "2:9.0.1984-1.fc38.x86_64"
     },
     "which": {
       "evra": "2.21-39.fc38.x86_64"
@@ -1267,7 +1267,7 @@
       "evra": "2.1.0-21.fc38.x86_64"
     },
     "zchunk-libs": {
-      "evra": "1.3.1-1.fc38.x86_64"
+      "evra": "1.3.2-1.fc38.x86_64"
     },
     "zincati": {
       "evra": "0.0.25-4.fc38.x86_64"
@@ -1283,16 +1283,16 @@
     }
   },
   "metadata": {
-    "generated": "2023-10-02T00:00:00Z",
+    "generated": "2023-10-14T00:00:00Z",
     "rpmmd_repos": {
       "fedora": {
         "generated": "2023-04-13T20:37:10Z"
       },
       "fedora-coreos-pool": {
-        "generated": "2023-10-01T23:23:20Z"
+        "generated": "2023-10-14T02:07:48Z"
       },
       "fedora-updates": {
-        "generated": "2023-10-02T01:19:54Z"
+        "generated": "2023-10-14T01:23:14Z"
       }
     }
   }
diff --git a/overlay.d/05core/usr/lib/dracut/dracut.conf.d/coreos-omits.conf b/overlay.d/05core/usr/lib/dracut/dracut.conf.d/coreos-omits.conf
index 7aca06dff6..bf07099c46 100644
--- a/overlay.d/05core/usr/lib/dracut/dracut.conf.d/coreos-omits.conf
+++ b/overlay.d/05core/usr/lib/dracut/dracut.conf.d/coreos-omits.conf
@@ -9,6 +9,9 @@ omit_dracutmodules+=" nfs lvm dmraid "
 omit_dracutmodules+=" fcoe fcoe-uefi nbd "
 # We use NetworkManager
 omit_dracutmodules+=" systemd-networkd network-legacy network-wicked "
+# We only want to propagate NM keyfiles.
+# See also https://github.com/dracutdevs/dracut/pull/2529.
+omit_dracutmodules+=" ifcfg "
 # We use systemd network naming
 omit_dracutmodules+=" biosdevname "
 # Random stuff we don't want
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.service b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.service
index 9703eec33a..b08c827bc5 100644
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.service
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.service
@@ -18,13 +18,13 @@ DefaultDependencies=false
 Before=ignition-mount.service
 Before=ignition-complete.target
 
-# Since we are tearing down networking using NetworkManager itself
-# we need to make sure NetworkManager is running. Similarly
-# dbus-broker since nmcli talks to the daemon via DBUS. Since the
-# ordering for ExecStop is the opposite of ExecStart we need to use
-# `After=` here.
-After=nm-initrd.service
-After=dbus-broker.service
+# Since we are tearing down networking we need to make sure
+# NetworkManager has been stopped, otherwise it'll be trying
+# to react to our delete/down operations. Since the ordering
+# for ExecStop is the opposite of ExecStart we need to use
+# `Before=nm-initrd.service`.
+# https://issues.redhat.com/browse/OCPBUGS-11052
+Before=nm-initrd.service
 
 # Make sure ExecStop= runs before we switch root
 Conflicts=initrd-switch-root.target umount.target
diff --git a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh
index afe69a99b4..35d681418b 100755
--- a/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh
+++ b/overlay.d/05core/usr/lib/dracut/modules.d/35coreos-ignition/coreos-teardown-initramfs.sh
@@ -182,15 +182,55 @@ propagate_ifname_udev_rules() {
     fi
 }
 
+down_interface() {
+    echo "info: taking down network device: $1"
+    # On recommendation from the NM team let's try to delete the device
+    # first and if that doesn't work then set it to down and flush any
+    # associated addresses. Deleting virtual devices (bonds, teams, bridges,
+    # ip-tunnels, etc) will clean up any associated kernel resources. A real
+    # device can't be deleted so that will fail and we'll fallback to setting
+    # it down and flushing addresses.
+    if ! ip link delete $1; then
+        ip link set $1 down
+        ip addr flush dev $1
+    fi
+}
+
+# Iterate through the interfaces in the machine and take them down.
+# Note that in the future we would like to possibly use `nmcli` networking off`
+# for this. See the following two comments for details:
+# https://github.com/coreos/fedora-coreos-tracker/issues/394#issuecomment-599721763
+# https://github.com/coreos/fedora-coreos-tracker/issues/394#issuecomment-599746049
+down_interfaces() {
+    if ! [ -z "$(ls /sys/class/net)" ]; then
+        for f in /sys/class/net/*; do
+            interface=$(basename "$f")
+            # The `bonding_masters` entry is not a true interface and thus
+            # cannot be taken down. Also skip local loopback
+            case "$interface" in
+                "lo" | "bonding_masters")
+                    continue
+                    ;;
+            esac
+            # When we start taking down devices some other devices can
+            # start to disappear (for example vlan on top of interface).
+            # If the device we're about to take down has disappeared
+            # since the start of this loop then skip taking it down.
+            if [ ! -e "$f" ]; then
+                echo "info: skipping teardown of ${interface}; no longer exists."
+                continue
+            fi
+            down_interface $interface
+        done
+    fi
+}
+
 main() {
     # Load libraries from dracut
     load_dracut_libs
 
-    # Take down all networking set up in the initramfs
-    if systemctl is-active --quiet nm-initrd.service; then
-        echo "info: taking down initramfs networking"
-        nmcli networking off
-    fi
+    # Take down all interfaces set up in the initramfs
+    down_interfaces
 
     # Clean up all routing
     echo "info: flushing all routing"
@@ -209,13 +249,10 @@ main() {
         propagate_ifname_udev_rules
     fi
 
-    # Configuration has been propagated, but we can't clean up
-    # /run/NetworkManager because NM is still running. Let's drop
-    # down a tmpfiles.d snippet so that it's cleaned up first thing
-    # in the real root. Doing it this way prevents us having to write
-    # another unit to do the cleanup after this service has finished.
-    echo "R! /run/NetworkManager - - - - -" > \
-        /run/tmpfiles.d/15-teardown-initramfs-networkmanager.conf
+    # Now that the configuration has been propagated (or not)
+    # clean it up so that no information from outside of the
+    # real root is passed on to NetworkManager in the real root
+    rm -rf /run/NetworkManager/
 
     rm -f /run/udev/rules.d/80-coreos-boot-disk.rules
     rm -f /dev/disk/by-id/coreos-boot-disk
diff --git a/tests/kola/docker/basic b/tests/kola/docker/basic
index 7ab6bf9979..c1cbafcc1f 100755
--- a/tests/kola/docker/basic
+++ b/tests/kola/docker/basic
@@ -2,6 +2,8 @@
 ## kola:
 ##   # Must not run this test with another podman test
 ##   exclusive: true
+##   # We only ship moby/docker in FCOS
+##   distros: fcos
 ##   # This test pulls a container image from remote sources.
 ##   tags: "platform-independent needs-internet"
 ##   description: Verify that running a basic container with docker works.
diff --git a/tests/kola/upgrade/extended/test.sh b/tests/kola/upgrade/extended/test.sh
index 372e9b9084..5eebc130a8 100755
--- a/tests/kola/upgrade/extended/test.sh
+++ b/tests/kola/upgrade/extended/test.sh
@@ -77,7 +77,7 @@ stream=$(get_booted_deployment_json | jq -r '.["base-commit-meta"]["fedora-coreo
 
 # Pick up the last release for the current stream from the update server
 test -f /srv/updateinfo.json || \
-    curl -L "https://updates.coreos.fedoraproject.org/v1/graph?basearch=$(arch)&stream=${stream}" > /srv/updateinfo.json
+    curl -L "https://updates.coreos.fedoraproject.org/v1/graph?basearch=$(arch)&stream=${stream}&rollout_wariness=0" > /srv/updateinfo.json
 last_release=$(jq -r .nodes[-1].version /srv/updateinfo.json)
 last_release_index=$(jq '.nodes | length-1' /srv/updateinfo.json)
 latest_edge=$(jq -r .edges[0][1] /srv/updateinfo.json)