ostree

Operating system and container binary deployment and upgrades

OTHER License

Downloads
98.6K
Stars
1.3K
Committers
166

Bot releases are hidden (Show)

ostree - 2024.7 Latest Release

Published by cgwalters 3 months ago

A relatively minor release; this has a bugfix for "transient-etc" users, and a new ostree.prepare-root.composefs kernel option that allows dynamic overrides for the composefs state. There's also a new API to directly create a composefs from an ostree commit.

What's Changed

New Contributors

Full Changelog: https://github.com/ostreedev/ostree/compare/v2024.6...v2024.7

ostree - v2023.6

Published by jmarrero 5 months ago

This release brings us various bug fixes on top of enhancements to ci, docs and tests.
What's Changed:

Alexander Larsson (3):
      _ostree_ensure_fsverity: Properly check for errors
      prepare-root: Handle non-AB aboot properly
      Fix _ostree_ensure_fsverity reporting of supports in early exit

Colin Walters (12):
      configure: post-release version bump
      curl: Also map HTTP errors for retries
      sepolicy: Add missing `(nullable)`
      init-fs: Add --epoch
      init-fs: Add --epoch=2
      tests: Skip composefs tests without the feature
      ci: Drop `SKIP_INSTALLDEPS=1`
      Switch to external composefs
      ci: Only run clang-format on ubuntu-stable GH runner
      ci: Also skip if we detect /run/.containerenv
      sysroot: Handle `/ostree/deploy` having epoch 0
      docs: Describe offline updates with static deltas

Dan Nicholson (2):
      tests: Correctly skip single fsverity test
      repo: Make summary and signature mtime match

Eric Curtin (3):
      README & docs: Remove "RHIVOS" acronym
      docs: More accurate diagram in bootloaders documentation for aboot
      docs: Fix spelling and grammer

Jonathan Lebon (1):
      ostree-prepare-root.service: add OnFailureJobMode=isolate

Joseph Marrero (3):
      ostree-sysroot-deploy: check if deployments are in the same stateroot.
      Release 2024.6
      configure: post-release version bump

Full Changelog: https://github.com/ostreedev/ostree/compare/v2024.5...v2024.6

ostree - v2024.5

Published by cgwalters 7 months ago

What's Changed

Full Changelog: https://github.com/ostreedev/ostree/compare/v2024.4...v2024.5

ostree - v2024.4

Published by cgwalters 8 months ago

What's Changed

New Contributors

Full Changelog: https://github.com/ostreedev/ostree/compare/v2024.3...v2024.4

ostree - v2024.3

Published by cgwalters 8 months ago

New features and notable changes

This release changes how /var works (again):

The mount setup also had a semantic change for those enabling root.transient:

Also related to prepare-root, it is now recommend to enable composefs by simply configuring ostree-prepare-root.conf and not the ex-integrity.composefs variable:

Other changes

New Contributors

Full Changelog: https://github.com/ostreedev/ostree/compare/v2024.2...v2024.3

ostree - 2024.2

Published by cgwalters 8 months ago

What's Changed

New features

The ostree admin pin command learned more human-consumable verbs:

Bugfixes

Other changes

New Contributors

Full Changelog: https://github.com/ostreedev/ostree/compare/v2024.1...v2024.2

ostree - 2024.1

Published by cgwalters 9 months ago

New features

There are two major new APIs around configuring mutability and persistence of the root filesystem.

First, OSTree gained support for a new root.transient flag that makes / an overlayfs that is persistent across reboots but not across upgrades. This makes the system behave a bit more similarly to e.g. Docker and following tools such as podman and Kubernetes.

There is a different approach in the (still classified as experimental) [email protected] unit:

This approach instead allows operating systems or downstream builders to choose to apply persistent merge semantics to specific targeted directories (e.g. /opt).

Notable bugfixes

Other misc changes

New Contributors

Full Changelog: https://github.com/ostreedev/ostree/compare/v2023.8...v2024.1

ostree - 2023.8

Published by cgwalters 11 months ago

This release stabilizes "deployment finalization locking" which
is very useful for automatic update workflows.

There's a new post-copy command which may be useful for build
systems that generate a filesystem tree outside of ostree:

The commit logic started using reflinks (if available) which
can be a big speedup.

System root and bootloader:

Finally, ostree now ships a tmpfiles.d fragment which copies from /usr/share/factory/var to /var
by default:

ostree - v2023.7

Published by cgwalters 12 months ago

A variety of things here. I think the new support for a "transient etc"
will be appreciated in many places. Note that to work with SELinux
the build system side needs to ensure the labels on /usr/etc match /etc.

Another important change is that the ostree HTTP layer now retries requests
by default; this closes a very longstanding RFE.

Also on the pull side, a longstanding bug was fixed where we'd still
try to fetch "loose" objects even when we were doing a delta pull.

There's a variety of clang-analyzer fixes (some false positives, some real
memory leaks, etc).

Even more in the below log; thanks to all contributors!

What's Changed

New Contributors

Full Changelog: https://github.com/ostreedev/ostree/compare/v2023.6...v2023.7

ostree - 2023.6

Published by cgwalters about 1 year ago

signing: ed25519 can now be backed by openssl

If ostree is compiled with OpenSSL support (as it is on e.g. Fedora derivatives), this also enables an OpenSSL-backed implementation of the ed25519 signature support. Previously, this required libsodium - which can still be used if desired instead of openssl.

composefs changes

Now enabled at build time (but disabled at runtime) by default

On systems with sufficiently new glibc and fsverity, ostree enables support for composefs at build time. It continues to be disabled by default at runtime.

composefs now supports signature verification

There is support for an "initramfs root binding key" that can be injected into the initramfs, and used to verify the ostree commit (including its embedded composefs checksum). One suggested model is to follow how e.g. Fedora signs kernel modules with a transient throwaway key. For more, please see the ostree/composefs doc.

Note that composefs continues to be classified as experimental.

Configuration format has changed

The old ot-composefs kernel argument is no longer honored in favor of a configuration file that should be present in the initramfs.

ostree-prepare-root other changes

  • A new configuration file in the initramfs is honored: /etc/ostree/prepare-root.conf
  • This configuration file can also specify the readonly-sysroot default, which is now recommended
  • Improved Android Boot support
  • The sysroot.readonly flag can now also be configured from here, and this is recommended
  • /run/ostree-booted is now non-empty, and contains serialized state (this is an implementation detail)
  • Several preparatory code cleanups for other changes
  • ostree-prepare-root has a new man page which documents the previous state, along with the above

ostree admin set-default

A long-overdue CLI verb to change the default deployment for the next boot.

sysroot other bugfixes and changes

  • It is now supported to have /usr/etc with an empty /etc. This is preparatory for supporting a transient /etc.
  • Finally fixed the global sync timeout at shutdown
  • Increased verbosity of changes
  • ostree admin deploy now honors --stateroot as we prefer that term over --os

trivial-httpd

The remnants of the deprecated ostree trivial-httpd CLI are now completely gone.

Alexander Larsson (8):
      tests: Fix composefs test
      sign-ed25519: Drop some uses of libsodium
      sign-ed25519: Implement sign and verify using openssl
      CI: Enable --with-crypto=openssl on debian testing to test openssl signatures
      libotutil: Link to crypto libs
      ostree-prepare-root: Validate ed25519 signatures when requested
      Read composefs configuration from initrd instead of commandline
      prepare-root: Only support base64 formated public key files

Colin Walters (84):
      tests/transactionality: Port a bit to xshell
      tests: Drop unused alias
      tests: Enable mtime test
      docs: Update user and group section
      Separate prepare-root static path
      prepare-root: Link to glib
      configure: post-release version bump
      Drop "ostree trivial-httpd" CLI, move to tests directory
      fetcher: Always open tmpfiles in repo (except on FUSE)
      show: Add --print-hex
      build-sys: Add libsodium to OT_DEP_CRYPTO
      Factor out a libotcore
      build: Drop `make syntax-check`
      Add an internal constant for the composefs image name
      prepare-root: Use otutil and g_print
      prepare-root: Drop unused verity flag querying
      sysroot: Add some error prefixing for bootversion
      prepare-root: Use constant for ed25519 signature
      prepare-root: Add metadata for composefs to `/run/ostree-booted`
      remount: Don't overwrite /run/ostree-booted
      remount: Use new metadata in `/run/ostree-booted` for composefs
      prepare-root: Drop dead `pivot_root` code
      Use /run/ostree-booted metadata for sysroot-ro state passing
      man: Add ostree-prepare-root
      mount: Fix gcc -fanalyzer warning for parsing androidboot.slot_suffix
      build-sys: Enable composefs at *build time* by default
      prepare-root: Refactor composefs config handling
      commit: Add `--sign-from-file`
      tests: Remove dead references to "SEED"
      sign-ed25519: More verbose errors for invalid length
      sign-ed25519: Add some comments for data structure
      sign-ed25519: Don't set sk unless we've validated it
      generator: Deduplicate ostree= karg parsing
      prepare-root: Drop code mounting `/proc`
      prepare-root: Drop more dead code
      Add an always-on `inode64` feature
      composefs: Use lowerdir in /run
      generator: Stop creating `/run/ostree-booted`
      src/generator: Move all logic into libostree-1.so
      kernel-args: Move private functions out of public header
      sysroot: Add a bit more error prefixing
      repo: Clarify when we fail to parse a remote
      prepare-root: Introduce `ostree/prepare-root.conf`
      prepare-root: Default sysroot.readonly=true if composefs
      prepare-root: Don't parse target root when composefs enabled
      tree-wide: Consistently `(void)g_variant_lookup()`
      core, switchroot: Harden a bit against `g_variant_get_data() == NULL`
      checksum-utils: Add an assertion that `buf != NULL`
      deploy: Be way more verbose about what we're doing
      tests/destructive: Turn off global sync()
      deploy: Support an empty `/etc` and populated `/usr/etc`
      composefs: Only call `_get_symlink_target()` on symlinks
      os-init: Create a mount namespace
      Add `admin set-default`
      More fully drop `trivial-httpd` entrypoint
      deploy: Fix mutex locking for global sync timeout
      README.md: Drop dead mailing list, link to GH discussions
      prepare-root: Use declare-and-initialize
      prepare-root: Check for empty string, not strlen > 0
      prepare-root: Use ptrarray, not linked list
      switchroot,generator: Only read /proc/cmdline once
      deploy: Add some error prefixing
      prepare-root: Minor clarifications
      repo: Bump lock timeout to 5 minutes
      Add `ostree admin stateroot-init` as alias for `os-init`
      admin-deploy: Add `--stateroot` as alias for `--os`
      admin: Port to c99 style
      remote-add: Port to c99 style
      lzma: Port to C99 style
      checkout: Port to C99 style
      cli/set-origin: Port to C99 style
      tests/destructive: Port more to xshell
      build-sys: Disable composefs on too-old Linux headers
      tests: Add otcore unit tests
      tests/inst: Update to latest ostree-ext
      cmd/init: Port to C99 style
      cmd/grub2-generate: Port to C99 style
      Move prepare-root karg helpers into otcore, add unit tests
      deploy: Add bootloader-naming-2 opt-init
      ci: Add c9s build
      build-sys: Look for both linux/mount.h and sys/mount.h
      build-sys: Really fix composefs check
      Release 2023.6
      configure: post-release version bump

Eric Curtin (6):
      android-boot: Remove dependency on ostree= karg, use androidboot.slot_suffix=
      Remove steal_pointer and steal_pointer_impl as we link in glib now
      bootloader: fold all Android Bootloader specific logic into prepare-root
      prepare-root: On a non-A/B androidboot system, boot system slot a
      prepare-root: Changes made to find_proc_cmdline_key
      prepare-root: If composefs is configured as "maybe" don't fail

dependabot[bot] (5):
      build(deps): bump composefs from `412cb5e` to `ac729b5`
      build(deps): bump composefs from `ac729b5` to `1704f82`
      build(deps): bump libglnx from `07e3e49` to `c02eb59`
      build(deps): bump composefs from `1704f82` to `a6e827d`
      build(deps): bump composefs from `a6e827d` to `1aed878`

samcday (1):
      docs: update boot loader spec link
ostree - 2023.5

Published by cgwalters over 1 year ago

This is a bugfix release for the recent 2023.4.

Key bugs fixed

Other changes

Full Changelog: https://github.com/ostreedev/ostree/compare/v2023.4...v2023.5

ostree - 2023.4

Published by cgwalters over 1 year ago

Notable bugfixes

This is a simple patch that is a candidate for backporting to e.g. stable distribution/OS versions of ostree.

New features

composefs

See the documentation.

ostree=aboot for Android Boot

HTTP/pull fixes

Other changes

New Contributors

Full Changelog: https://github.com/ostreedev/ostree/compare/v2023.3...v2023.4

ostree - 2023.3

Published by jmarrero over 1 year ago

Release 2023.3

NOTE: As usual, some of these commits are actually for the Rust bindings,
which are versioned and released separately.

Colin Walters (14):
      configure: post-release version bump
      treegen: Require at least one mutation
      ci: Turn off errors for deprecated-declarations
      ci: Drop workaround for fedora-release-container
      rust: Bump MSRV to 1.64
      build-sys: Squash automake conditional warning re `.PHONY`
      Add clang formatting infrastructure
      lib: clang-format `ostree.h`
      tree-wide: Fix various include ordering issues
      lib: Fix one include
      clang-format: Don't align backslashes
      tree-wide: Run clang-format
      ci: Validate clang-format
      tests/inst: Add xshell and use it in one place

Dan Nicholson (3):
      tests: Ensure real GIO backends aren't used
      ci: Add test configuration with soup3
      fetcher/soup3: Rewrite without threads

Daniel Kolesa (1):
      fetcher: add libsoup3 backend

Jonathan Lebon (10):
      lib/sysroot-cleanup: Convert bootdir listing to dfd-relative
      lib/sysroot-cleanup: Make some static utility functions global
      lib/sysroot-cleanup: Drop dead code
      lib/sysroot-cleanup: Factor out bootfs cleanup
      lib/sysroot-cleanup: Make bootfs cleanup function global
      libotutil: add utility functions for calculating directory size
      lib/sysroot-deploy: Nuke `finalize-failure.stamp` on successful finalization
      tests/kola: delete unused .gitignore
      tests/kolainst: Add `make localinstall`
      lib/sysroot-deploy: Add experimental support for automatic early prune

Joseph Marrero (2):
      Release 2023.3
      configure: post-release version bump

Philip Withnall (1):
      lib/fetcher: Add some debugging messages to the libsoup request path

Full Changelog: https://github.com/ostreedev/ostree/compare/v2023.2...v2023.3

ostree - 2023.2

Published by cgwalters over 1 year ago

Release 2023.2

NOTE: As usual, some of these commits are actually for the Rust bindings,
which are versioned and released separately.

Though speaking of bindings in general,
there's a lot of cleanup that landed to the annotations around
nullability in general, which should improve ergonomics. These
changes will be reflected in a future release of the Rust bindings
specifically too.

Otherwise, we have some small tweaks and improvements in various places,
from a performance improvement in commits to test suite fixes.

A notable thing that landed here is fixes for recent GLibs introducing
warnings around unset standard::size.

Thanks to all contributors!

Colin Walters (18):
      Add `sysroot.bootprefix` option
      deploy: Use `semodule --refresh` if available
      configure: post-release version bump
      Release rust/ bindings 0.17.1
      rust-bindings: Regenerate for 2023.1
      rust-bindings: `Sysroot` is `Send`
      itest-pull-space: Use mkfs.ext4, align to at least 512b
      tests: Set size on fileinfo
      Enable `trust_return_value_nullability`
      Add docs and fix annotations for ostree-repo-file.c
      rust: Bump semver
      lib: Fix two nullable annotations
      repo: Fix nullability for remote options
      rust: Renerate bindings
      Revert "repo: Fix nullability for remote options"
      rust-bindings: Regenerate
      Release 2023.2
      configure: post-release version bump

Corentin Noël (3):
      build: Do not include private headers in the introspection
      libostree: Ignore new_and_connect in the introspection
      libostree: Enhance the annotation coverage

Evan Anderson (1):
      core: Ensure glib standard::size attribute is always set

Jonathan Lebon (1):
      ci: update for new kolaTestIso()

Philip Withnall (1):
      lib/fetcher-util: Wake up main context when a request is complete

Seppo Yli-Olli (1):
      Increase buffer size for create_regular_tmpfile_linkable_with_content

Simon McVittie (5):
      tests: Ensure non-root users have access to libcap tools
      ostree_raw_file_to_content_stream: Make size default to 0
      _ostree_zlib_file_header_new: Default size to 0
      write_content_object: Don't assume file info has standard::size
      Use g_steal_fd() in preference to glnx_steal_fd()

Timothée Ravier (1):
      docs: Use upstream theme & update to 0.4.1

dependabot[bot] (1):
      build(deps): bump libglnx from `4e44fd9` to `07e3e49`

-----BEGIN SSH SIGNATURE-----
U1NIU0lHAAAAAQAAADMAAAALc3NoLWVkMjU1MTkAAAAg5CRAd4pqfdf6DWMgvDhrcq1x8Q
gQPSQHIoZaiiRTt68AAAADZ2l0AAAAAAAAAAZzaGE1MTIAAABTAAAAC3NzaC1lZDI1NTE5
AAAAQJGTvsjNISYt6gOheoejoo2Znn3j11juGWFABJycsMqXxSBRQ7NXOZWJvctyleHVX+
QrLs/Wa0KPgo91tMoenwg=
-----END SSH SIGNATURE-----

New Contributors

Full Changelog: https://github.com/ostreedev/ostree/compare/v2023.1...v2023.2

ostree - 2023.1

Published by cgwalters over 1 year ago

What's Changed

New Contributors

Full Changelog: https://github.com/ostreedev/ostree/compare/v2022.7...v2023.1

ostree - v2022.7

Published by cgwalters almost 2 years ago

(Some of these commits are actually only for the Rust bindings;
will try to enhance the release flow to more clearly filter
those out)

On the feature front, there's new APIs for idempotent delete operations on
kernel arguments, and for handling unshare() to
manipulate (otherwise) read-only sysroot.

A few very small memory leak fixes.

Many people will be happy that we now retry HTTP requests after
receiving HTTP 500 errors.

There's a notable bugfix avoiding rebuilding SELinux policy
when creating a first deployment.

Thanks to all contributors!

Colin Walters (18):
      Remove readdir-rand
      deploy: Don't rebuild selinux policy on first deployment
      ci: Bump memory for ISO testing flow
      rust: Update to cap-std 1.0
      rust: Drop `openat` dependency
      ci: Fix case where cosa != buildroot
      rust: Update to gio 0.16
      repo: Avoid potential double unwind when writing panic value
      Allow missing docs on two `glib::wrapper` functions
      sysroot: Add an API to initialize with mountns
      rust: Regenerate with latest gir and C sources
      tests/inst: Update to latest ostree-ext
      tests/inst: Drop nix dependency
      tests/inst: Update cap-std-ext to 1.0
      tests/inst: Update sh-inline
      tests: Require OSTREE_TEST_SUDO to be set to use `sudo`
      ci: Add a flow that combines C build and Rust integration tests
      Release 2022.7

Jonathan Lebon (4):
      ci: Bump memory request, use fcosKolaTestIso
      ci: Drop unnecessary outer stage
      ci: Use new names for custom kola steps
      ci: bump cosaPod memory requirement to 5Gi

Luca BRUNO (20):
      configure: post-release version bump
      lib/repo-checkout: fix typo in error message
      lib/bootloader-zipl: check for errors when opening initrd
      lib/static-delta: document and check parameters format
      rust/tests: fix static delta generation testcase
      lib/sign-ed25519: convert invariant checks to assertions
      rust: regenerate bindings after latest release (2022.6)
      ostree: manually patch generated files
      rust: update manual helpers
      ci/rust: bump linting toolchain to latest stable (1.64)
      lib/repo-refs: properly return an error value
      rust: update pinned gir tool to 0.15
      rust/ostree-sys: regenerate for gtk-rs 0.15
      rust/ostree: regenerate for gtk-rs 0.15
      ci/rust: test from git using latest feature
      cargo: prepare ostree 0.16.0 and ostree-sys 0.11.0
      copr: only use libostree tags
      ci: adjust git tags filtering
      cargo: bump minimum Rust version to 1.63
      ostree: manually patch generated files

Manuel Stühn (1):
      Add test for generating static delta to file

Philip Withnall (4):
      ot-builtin-commit: Fix a typo in a command line help string
      ot-builtin-commit: Don’t mention a C function name in a help string
      lib/pull: Fix a small leak when a variable is reused
      ot-builtin-pull: Fix a minor leak with progress reporting

Rafael Garcia Ruiz (2):
      ostree_kernel_args_contains for OstreeKernelArgs
      Idempotent delete operation for  OstreeKernelArgs

Ricardo Noriega (2):
      Enabling retry for HTTP 500 internal server error
      Add tests for cases under random 500s

Simon McVittie (2):
      readdir-rand: Copy full size of struct dirent
      Replace calls to g_memdup() with g_memdup2()

dependabot[bot] (2):
      build(deps): bump libglnx from `26375b5` to `e701578`
      build(deps): bump libglnx from `e701578` to `4e44fd9`

Git-EVTag-v0-SHA512: 9cbc7a178f1cc0dbda25ea1af5f9d4991f41c28768826c44cf2d42333c0677b22daaef6532eb075931f6c5622947780daaa1ec4a5fc64e2adef230feaed372c7

ostree - 2022.6

Published by lucab about 2 years ago

This release contains a collection of bugfixes and enhancements. Notable fixes concern finalize-staged, which should now better support automounted partitions and skip waiting for termination signal.

A file descriptor leak has been fixed in the commit logic. The codebase has also been fixed to avoid conflicting declarations when building with latest glibc (>= 2.36). Thanks @GeorgesStavracas for both fixes!

On the feature side, there is now basic support for handling overlayfs whiteouts on checkout through a new --process-passthrough-whiteouts flag. This is useful for users that need to carry container storage embedded into ostree commits. Thanks @mangelajo for that!

The ostree rev-parse command gained a new --single flag to better support repositories containing exactly one commit.
Overall, the s390x Secure Execution (SE) logic has been reworked to stop relying on glue scripts.

Thanks to all contributors!


Andrea Perotti (1):
      Fix recursive git archive reference

Colin Walters (12):
      configure: post-release version bump
      rust-bindings: Fix `cargo fmt`
      deny.toml: Add `Unicode-DFS-2016`
      Remove unused `linux/fs.h` includes
      Move FIFREEZE/FITHAW ioctl invocations into linuxfsutil.c
      cli/rev-parse: Port to new code style
      cli/rev-parse: Add `--single` option
      rust: Update to latest git
      ci: Also drop seccomp on debian testing
      rust: Bind `ostree_repo_list_commits_starting_with`
      finalize-staged: Don't listen to `SIGTERM`, just let kernel exit us
      README.md: Link otto

Dan Nicholson (3):
      main: Factor out sysroot loading
      finalize-staged: Ensure /boot automount doesn't expire
      lib/pull: Fix max-metadata-size documentation

Georges Basile Stavracas Neto (1):
      lib/commit: Unref repo on success

Huijing Hei (1):
      Fix `ostree admin kargs edit-in-place` assertion when deployments are pending

Jon Oster (1):
      docs: Add aktualizr and TorizonCore to related projects

Jonathan Lebon (3):
      lib/commit: Directly use FICLONE for payload link
      tests/kolainst/staged-deploy: parse `rpm-ostree status --json` instead
      docs: Add section about staged deployments

Luca BRUNO (7):
      libostree: fix a typo in annotation
      lib/bootloader: assert invariants
      lib/mtree: drop redundant name checks
      otutil: add error handling to variant builders
      lib/sign: convert invariant checks to assertions
      lib/repo: properly initialize boolean variable
      lib/sysroot-deploy: explicitly handle `g_variant_lookup` results

Lukas Kalbertodt (1):
      Update to `libtest-mimic` 0.5.0

Miguel Angel Ajo (1):
      Support overlayfs whiteouts on checkout

Nikita Dubrovskii (3):
      s390x: ensure both 'root' and 'boot' luks keys exist
      s390x: simplify 's390x-se-luks-gencpio' script
      s390x: use 'libarchive' to modify initrd in SE case

Sam James (1):
      buildutil/glibtests.m4: fix bashism

dependabot[bot] (1):
      build(deps): bump libglnx from `c59eb27` to `26375b5`

git-bruh (1):
      ostree-fetcher-curl: check for HTTP2 support before trying to use it
ostree - 2022.5

Published by cgwalters about 2 years ago

This release fixes a denial of service security issue: https://github.com/ostreedev/ostree/security/advisories/GHSA-gqf4-p3gv-g8vw
The core fix is in sign/ed25519: Verify signatures are minimum length in 83e6357186be11fb8f2a6b66fab3730c44ee59dd which should be an easily backportable commit. (There's some further changes to add test coverage for this that can be ignored)
This only affects builds that use libsodium; it is however remotely reachable (assuming that the client is talking to a compromised server; ordinarily exploiting this would require that or breaking TLS/https). Thanks to @DemiMarie for the report!

Additional highlights are:

  • Greatly improved performance for ostree prune on large repositories
  • Support for in-place kargs changes

Thanks to everyone who contributed!

Chris Mucciolo (1):
      docs add debos to readme distribution build tools

Colin Walters (44):
      configure: post-release version bump
      repo: Optimize memory use of `ostree_repo_list_objects()`
      rust: Bump semver, add feature for current release
      repo: Further optimize `ostree_repo_list_objects_set()`
      ci: Add a flow that does a git libostree + git rust-bindings
      prune: Also use object set API in `ostree_repo_prune_from_reachable()`
      lib: Fix symbol versioning inheritance
      tests/inst: Bump the version of ostree-ext
      rust-bindings: Fix repository reference
      rust-bindings: use correct README.md
      rust-bindings: Update cargo package list
      rust: Switch to 2021 edition
      ci: Bump MSRV
      rust: Use inline `format!` variables in a few places
      repo: Document non-obvious way to list all commits
      fsck: Don't load all object names into memory
      fsck: De-indent loop
      fsck: Move most commit processing into helper function
      fsck: Use `load_variant_if_exists`
      rust-bindings: Wire up `tests/`
      cli/os-init: Port to C99 style
      cli/undeploy: Port to C99 style
      cli/unlock: Port to C99 style
      cli/config: Port to C99 style
      cli/diff: Port to C99 style
      cli/gpg-sign: Port to C99 style
      cli/remote-list: Port to C99 style
      cli/refs: Port to C99 style
      ci/rust: Enable `cap-std-apis` in default build, add a no-feature build
      ci/rust: Change MSRV to `cargo check`
      Fix clippy lint in cap-std bits
      rust: Bump semver to 0.15
      Bump to cap-std 0.25 and io-lifetimes 0.7
      repo: Metadata return values from `load_file` are not nullable
      tests/staged-deploy.sh: Hack around cosa systemd unit check
      tests/inst: Port to cap-std
      lib: Stop using old `ostree_sysroot_get_repo()` API
      deny: Sync with rpm-ostree
      deploy: Ensure sysroot is initialized for kargs in place
      sysroot: Have `ensure_writable` also always initialize
      sysroot: Add a few more assertions about `boot_fd`
      sign/ed25519: Verify signatures are minimum length
      rust: Add a test case for ed25519
      Release 2022.5

Huijing Hei (4):
      RFE: Add a hidden option to `ostree admin kargs edit-in-place` to update all existing deployments in place
      Fix `ostree admin kargs edit-in-place` fails issue
      Add test to verify `ostree admin kargs edit-in-place` working
      Update doc about adding new function to libostree

Jonathan Lebon (2):
      Drop `.packit.yaml`
      tests/inst/destructive: stop disabling fedora-coreos-pinger

Matthias Beyer (1):
      Fix link to rust bindings

Nikita Dubrovskii (1):
      s390x: rename sd-boot to sdboot

Saqib Ali (2):
      lib/prune: speed up pruning by retrieving only commits
      ostree-repo: bls-append-except-default followup

Simon McVittie (1):
      test-basic-c: Don't assert that extended attributes are available

Full Changelog: https://github.com/ostreedev/ostree/compare/v2022.4...v2022.5

ostree - 2022.4

Published by cgwalters over 2 years ago

The big change in this release is that we have merged the Rust bindings repository into the main one:
https://github.com/ostreedev/ostree/pull/2575
As of right now though, this is just (somewhat) simplifying development of the Rust bindings, as we can now more easily share CI configuration and a single PR can add a new API and update the Rust bindings in one step.

As of right now though, the "libostree" C library will still be buildable without depending on Rust itself. We may change that in the future; for more, please see and discuss at: https://github.com/ostreedev/ostree/issues/2427

There are a few other additions in this release:

  • A new repository option bls-append-except-default intended to help with enabling GRUB password locking
  • Further fixes for s390x SE
  • Various CI improvements
  • Several API additions and fixes to the Rust bindings (on top of the prior release)
Colin Walters (80):
      configure: post-release version bump
      repo: Add concurrency=send
      ci: Add GH action to build
      Update to 2021.2
      Bump versions
      Bump sys version requirement
      Mark src/auto/* as generated
      ci: Fix buildroot to use new official image
      Update to glib 0.14
      Bump versions
      Add 2021.3 feature
      Re-export glib, gio
      Deny unused results, warn on missing docs (except auto/)
      Add new GLib 0.14 variant types for metadata types
      Add more documentation for --features=v2021_3
      Fix build with --features=v2021_3, use in CI by default
      Use glib-sys via re-exported `glib::ffi` (and similar for gio)
      Release 0.12.2
      lib: Export ffi too
      Cargo.toml: Bump to glib 0.14.4
      Release 0.12.3
      Release 0.13
      sys: Release 0.9.0
      lib: Reexport libc::AT_FDCWD
      Make `SePolicy` have `Send`
      repo: Expose dfd_as_file()
      (cargo-release) version 0.13.1
      (cargo-release) start next development iteration 0.13.2-alpha.0
      repo: Add `auto_transaction` and `TransactionGuard`
      (cargo-release) version 0.13.2
      (cargo-release) version 0.13.3-alpha.1
      Update to 2021.5
      Bump ostree-sys version
      (cargo-release) version 0.13.3
      (cargo-release) start next development iteration 0.13.4-alpha.0
      repo: Add `require_rev` method
      repo: Add an API to read and parse directory metadata
      Release 0.13.4
      Add a `cap-std-apis` feature with open/create
      repo: Add two more cap-std APIs
      Add `COMMIT_META_CONTAINER_CMD` constant
      Release 0.13.5
      Fast-track fix for `ostree_gpg_verify_result_get_all()`
      Release 0.13.6
      Add manual bindings for MutableTree reading
      repo: Add `query_file` API
      lib: Run `cargo fmt`
      Add a `repo()` accessor to `TransactionGuard`
      build-sys: Adjust for merge of ostree-rs
      docs/ima: Also link the SUSE docs
      cfg.mk: Don't even look at rust-bindings/
      Add APIs to get xattrs from disk
      tests/inst: Fix install rules for ostree-rs merger
      ci: Work around GH actions `container:` + git + security bug
      tests/inst: Add .gitignore
      ci: Move rust-bindings CI to toplevel
      rust-bindings: Remove some unused CI/test bits
      Merge pull request #2602 from cgwalters/fix-docs-ci
      Merge pull request #2601 from cgwalters/expose-get-xattrs
      Merge pull request #2575 from cgwalters/merge-ostree-rs
      ci: use cargo-deny
      sysroot: Quiet one gcc `-fanalyzer` warning
      sysroot: Strengthen several `g_return_if_fail` into `g_assert()`
      ci: Drop gcc `-fanalyzer` by default
      ci: Drop all `runAsUser: 0` in builds
      Merge pull request #2608 from cgwalters/fanalyzer-fixes
      ci: Move codestyle and min build to GH actions
      Merge pull request #2580 from nikita-dubrovskii/sdboot_partition
      Merge pull request #2612 from HuijingHei/deploy-karg-delete
      Merge pull request #2605 from saqibali-2k/pr/bls-append
      ci: Drop libsoup build in jenkins
      ci: Drop an unused files
      ci: Add a codestyle.sh
      gitignore: Add ci-build/
      Rename ostree-cmdprivate to drop out of introspection
      Drop `OSTREE_BUILT_FEATURES` from introspection
      rust-bindings: Delete committed gir files
      rust-bindings: Use OSTree-1.0.gir from our own builddir
      rust-bindings: Update to latest git
      Release 2022.4

Dusty Mabe (1):
      Merge pull request #2614 from nikita-dubrovskii/issue-2867

Felix Krull (357):
      Add config file and gir files
      Add initial gir output
      Add external libraries and regenerate
      Update names and dependencies
      Add manual definition for stat
      Start describing libostree
      Add build files for libostree
      Generate
      Add some basic types and regenerate
      Add a prelude module for star imports
      Add a test/sample program
      Add additional 'new' method to Repo
      Add as much of Repo as easily possible
      Integrate docs into source
      Generate functions and constants
      Try implementing traverse_commit by hand
      Ignore Cargo.lock in libs
      sample: try to extract a file from the repo
      Add ObjectName wrapper to solve hashing issues
      repo: change custom new method to std::path::Path-alike
      repo: remove now-incorrect comment
      object_name: extend ObjectName
      Add RepoListRefsExtFlags
      repo: implement list_refs and list_refs_ext
      Add simple repo roundtrip test
      Remove sample
      Add Makefile
      Regenerate libostree-sys
      Regenerate libostree
      repo: newlines
      Add docs to generated files
      Copy autodocs to hand-implemented methods in RepoExtManual
      Generate docs for RepoExtManual
      Ignore internal structs in libostree-sys
      Regenerate libostree-sys
      Add include to make libostree-sys tests work
      Run cargo fmt on the custom code
      Explicitly implement PartialEq for ObjectName to satisfy clippy
      Exclude generated code from clippy
      Un-bump versions
      Add workspace Cargo.toml
      Add CI config
      Install libostree in CI
      Use libostree from backports
      Also install libostree-dev for libostree builds
      Install libostree for everything, actually
      Do release build and simply job names
      Remove package stage for now
      Add some metadata to libostree-sys
      Add libostree-sys publish step
      Fix libostree-sys publish step
      Fix Gitlab URL & remove readme
      Add docs build
      Always build docs
      Only publish for master & set docs urls
      Remove release builds
      Bump -sys version
      Try setting up docs.rs capable build
      libostree-sys: switch to docs.rs and add license file
      libostree: add metadata, readme, and license file
      Disable libostree docs
      Strip the libostree docs
      Bump -sys version
      Add libostree release task
      libostree-sys: remove license file
      libostree: include API docs at build time using a feature flag
      Remove docs targets
      Build API docs with LGPL parts
      Always build docs
      Fix docs build hopefully
      Keep only one license file in the repo root
      Add a symlink to the package readme in the repo root
      Move readme to repo root and copy it to the code prior to packaging
      Update docs back to self-hosted
      Add Gitlab badge
      Bump versions
      Add LICENSE to packages
      Update readme a lot
      Add badge-with-link to docs
      Fix -sys pre-package
      --allow-dirty to deal with the extra files we copy in
      Add back API docs merge to Makefile
      Remove lgpl-docs feature
      Update readme
      Add CMake to build gir
      Add features
      Move main crate into repo root
      Move installed tools into target/tools
      Exclude unnecessary files correctly
      Update gitlab-ci.yml
      Get rid of pre-package workaround
      Reorganise gitlab-ci.yml a bit
      Move libostree-sys/ to sys/
      Remove some methods that are not generated correctly
      Test with all features
      sys: regenerate
      Repo rename
      Pin gir version
      Remove version constants to fix build with different libostree versions
      Remove unnecessary gir/* aliases
      Rename libostree-sys to ostree-sys
      Rename libostree to ostree
      Rename libostree to ostree
      Add note about crate rename
      Update base gir files
      Update OSTree gir and regenerate
      Test sys with v2018_9 until I can get 2019.2 for CI
      Add explanatory comments to ostree-sys.toml
      Fix features in Repo
      Build CollectionRef manually
      Fix return type for CollectionRef::new
      Add some sanity tests for CollectionRef
      Sanity test for ObjectName
      Fix a few more missing methods
      Add some tests for Repo
      Fix some issues with RepoFile
      Add some explanatory comments to gir config
      Pin rustdoc-stripper version
      Add more types
      sys: regenerate with external version file
      Add version features
      Update gir version
      sys: regenerate with new gir
      Add missing version features
      Regenerate and update to new gir and glib-rs version
      Build with older libostree version for now
      Reorganise test code
      Switch to generated CollectionRef
      Clarify reasons for async exclude
      Fix
      Add docs for methods that were moved to RepoExtManual
      Switch ObjectName to GString
      Add some more unsorted types
      Refactor tests and add test for traverse_commit
      Don't allow nightly runs to fail
      Add other interesting pipeline stages
      Don't separately build ostree-sys with nightly
      Disable CollectionRef tests on too-old features
      Suppress unused import warnings in generated code
      Try caching
      Also cache docs
      Add fmt check, check, clippy
      Fix gitlab-ci
      Don't fmt and check for now
      Add html_root_url
      Build docs more smartly
      Fix docs publish
      Change gir targets
      Update gir and regenerate
      Move extra Repo methods to plain impl as well
      Add more checks to the pipeline
      Adjust CI check flags
      Add test for checkout_tree
      Add ignored test for empty FileInfo crash
      We don't need to patch the hand-written Repo symbols any more
      Improve doc blurb a bit
      Document Repo::new_for_path
      Clean up some comments
      Ignore deprecated (and reportedly unsafe) method
      Document ObjectName
      collection_ref: add accessors for collection_id and ref_name
      Add copies of the various LGPL versions and notes about their relevance
      Check that we haven't included extraneous generated files
      Remove extraneous generated files
      Bump version
      Update version in README and add some notes on version bumps
      ci: use sccache
      Force clippy to run even after check
      Oh wait, check doesn't actually do anything useful for us...
      Disallow clippy warnings
      Ignore clippy issues in generated code
      Fix clippy issues
      Consolidate some pipeline stages
      Simplify docs build
      Revert "Simplify docs build"
      lib: RepoCheckoutAtOptions
      lib: handle ino cache and sepolicy options
      lib: satisfy clippy
      tests: fix checkout_at tests
      ci: run clippy with default features as well
      lib: implement CheckoutOptions::filter (hackishly)
      tests: fix imports with default features
      tests: reorganise repo tests so they have fewer feature flags
      lib: split out RepoCheckoutFilter
      lib: clean up types for RepoCheckoutFilter
      lib: add repo_checkout_filter function for better ergonomics
      lib: add docs and safety notes to RepoCheckoutFilter
      lib: fix clippy
      lib: catch unwinds in RepoCheckoutFilter
      lib: brush up some docs
      lib: generate some additional classes
      ci: add Makefile target to run gir -m not_bound
      lib: add some glib types to generate more functions
      conf: clean up comments a bit
      conf: add some more loose types
      Bump version
      Add notes about releases and tags
      Bump gir version
      Update to new glib-rs versions
      Enable futures feature
      ci: add job for futures feature
      conf: remove a problematic function that was fixed in gir
      ci: fix futures job maybe
      Fix tests on nightly (by avoiding UB, even)
      ci: include `futures` in docs
      ci: remove separate futures build
      ci: clean up image
      ci: still need before_script for docs
      ci: fix features for -sys
      ci: I guess we did need CMake
      ci: fix
      ci: use libostree from unstable
      Update gir version
      Add features for docs.rs build
      Enable some functions that seem to work now
      Revert "Enable some functions that seem to work now"
      ci: fix feature flags
      Update gir files
      Update OSTree-1.0.gir
      Disable build features constant
      Regenerate -sys
      Ignore BUILT_FEATURES from main crate
      Clean up docs.rs sections in Cargo.tomls
      Regenerate main crate
      ci: bump used version
      Add generated KernelArgs (not working yet)
      Make kernel_args compile
      kernel_args: enable and fix argv methods
      kernel_args: fix feature flags
      Implement Checksum type for binary checksums
      Implement Repo::write_content
      Implement Repo::write_metadata
      Implement Repo::write_content_async
      Implement Repo::write_metadata_async
      Add SePolicy::fscreatecon_cleanup
      Fix file mode
      Use pointer coercion instead of messing with -sys
      Implement ostree::checksum_file
      Implement ostree::checksum_file_from_input
      Implement ostree::checksum_file_async
      Implement ostree::checksum_file_at
      checksum: implement conversion from string and to base64
      checksum: implement more traits and functions
      Bump crate versions
      ci: fix build
      ci: run crates.io publish on release tags
      ci: update sccache
      ci: switch to Fedora Rawhide
      Fix clippy issue
      Set up cargo workspace
      ci: don't reformat -sys
      ci: install make
      ci: install sccache during docs build
      ci: fix setup, again
      Add feature alias for the latest OSTree version
      Update bundled glib gir files
      Update gir file
      Fix lint in tests
      Add some ignored types
      Bump versions
      gir: update OSTree-1.0.gir
      Regenerate files
      Add 2019.6 feature
      Bump versions
      Update glib + gir and regenerate
      Start taking out futures feature
      Rewrite handwritten futures functions
      Bump versions
      ci: ignore changes in versions.txt lines
      Revert "ci: ignore changes in versions.txt lines"
      Remove repo hash from versions.txt
      ci: disable clippy warnings for the moment
      gir: update to OSTree 2020.2 gir
      Regenerate for OSTree 2020.2
      Bump versions
      Bump ostree version
      gir-files: update to 2020.3
      ci: ignore gir differences in version files
      ci: build every feature level separately
      ci: install fewer things
      ci: simplify pipeline a bit maybe
      repo_checkout_at_options: fix version flags
      Bump version
      Ignore ci-cached directories so they don't interfere with the publish
      Add LICENSE to ostree-sys
      Change branch name references
      gir: update bundled gir files
      Start adding more update instructions to README
      Regenerate with new gir files
      Update gir version and regenerate
      Switch from lazy_static to once_cell
      Bump dependency versions
      gir: patch ostree_repo_finder_avahi_new
      conf: disable RepoFinder methods that don't autogenerate correctly
      sys: remove pkg-config dependency
      Use forked gir with updated shell-words and cleaned-up build.rs
      tests: use RepoMode::Archive (seems to be less finicky)
      src: use libc::c_char to improve non-x86 compatibility
      ci: update sccache
      ci: use --workspace instead of --all
      ci: test building for non-x86 target
      Switch back to upstream gir
      ci: change docs build command
      Update rustdoc-stripper
      ci: refactor pipeline
      ci: update readme (and pipeline)
      Add command to grab latest OSTree-1.0.gir from Fedora Rawhide
      Also remove OSTree-1.0.gir when cleaning gir files
      Add Vagrantfile
      Bump versions
      Fix indentation in readme
      Add script to get OSTree-1.0.gir from libostree source build
      Update to OSTree 2020.4
      Add feature levels to Cargo.toml
      Update docs
      ci: try different Fedora image?
      PATCH: version on ostree_repo_commit_modifier_set_sepolicy_from_commit
      PATCH: version on OSTREE_SIGN_NAME_ED25519
      PATCH: versions on ostree_sign_* functions
      Switch ostree source to git
      gir: switch to gir based on patched upstream source
      gir: start fixing OSTree.Sign
      gir: add missing version tag
      gir: fix out parameters not being marked correctly
      gir: fix another out parameter
      sign: add sanity check for sign API
      conf: disable internal Sign subtypes
      Update to OSTree 2020.5
      Disable some irrelevant functions
      src: add CommitSizesEntry
      conf: remove some unfixable TODOs
      Makefile: only depend on gir bin in gir-report
      src: add support for write_deployments_with_options
      src: reimplement checksum hex and base64 en/decoding
      conf: annotate ignores better
      src: add Checksum::from_bytes
      conf: ignore some more special-cased functions
      Bump versions
      conf: anchor function name patterns to avoid unexpected exclusions
      Update gir file to 2020.6
      gir: update misc gir files
      gir: update OSTree gir
      Regenerate based on new gir
      Switch to patched ostree gir
      ci: fix rawhide stages?
      src: manually implement SysrootDeployTreeOpts
      src: fix tests
      Remove outdated sentence in readme
      Bump versions
      Update common gir files
      Fix ostree gir file update
      Update OSTree-1.0.gir to 2021.1
      Regenerate
      Switch to patched ostree gir
      Regenerate
      Bump all versions
      Update rustdoc-stripper

Huijing Hei (3):
      Teach --karg-delete option to ostree admin deploy
      Fix GNU style of two spaces for indent in https://github.com/ostreedev/ostree/pull/2612
      Remove dup "--os=OSNAME" line in output of "ostree admin config-diff --help"

James Westman (1):
      Fix annotations on ostree_mutable_tree_lookup()

Jonathan Lebon (7):
      Merge pull request #2596 from cgwalters/release-2022-3
      Merge pull request #2615 from nikita-dubrovskii/handle_errors
      copr: mark git checkout as safe
      Merge pull request #2619 from nikita-dubrovskii/skip_gzip_unpacking
      Merge pull request #2621 from cgwalters/drop-jenkins-soup
      Merge pull request #2622 from cgwalters/more-ci
      Merge pull request #2627 from cgwalters/bindings-drop-committed-gir

Joseph Marrero Corchado (6):
      Merge pull request #2598 from lucab/ups/without-systemd-fix
      Merge pull request #2600 from cgwalters/link-suse-ima
      Merge pull request #2603 from cgwalters/use-cargo-deny
      Merge pull request #2610 from cgwalters/ci-tweaks-2
      Merge pull request #2624 from cgwalters/misc-introspection-fixes
      Merge pull request #2625 from cgwalters/drop-features-introspection

Luca BRUNO (21):
      lib/ostree-sysroot-deploy: add a missing include for stdint.h
      ci/github: add a job for --without-libsystemd
      repo_transaction_stats: move to a manual implementation
      cargo: fix version in features chain
      lib: fix 'dox' feature
      cargo: point to docs.rs and clean up
      ostree: release 0.12.1
      cargo: bump ostree-sys to 0.8.1
      sysroot: add a builder object
      sysroot: support create and load actions on builder
      sys/cargo: refresh manifest
      lib: fix new clippy warnings
      lib: run rustfmt
      ci: add jobs for MSRV checks and linting
      gir-files: bump to v2022.2
      ostree-sys: refresh after gir bump
      ostree-sys: release 0.9.2
      ostree/cargo: bump to ostree-sys 0.9.2
      ostree: refresh after gir bump
      ostree: manually patch generated files
      ostree: release 0.13.7

Luca Bruno (5):
      Merge pull request #2606 from ostreedev/dependabot/submodules/libglnx-c59eb27
      Merge pull request #2616 from HuijingHei/dup-osname
      Merge pull request #2618 from jlebon/pr/copr-fix
      Merge pull request #2613 from GuiltyDoggy/man-update
      Merge pull request #2620 from jameswestman/lookup-annotations

Manuel Stühn (5):
      implement list_objects-function an test
      switch from if-else to match
      update result type
      add ObjectDetails-struct and use it in list_objects-function
      Update impl Display, omit to_string, change wording

Nikita Dubrovskii (4):
      s390x: generate sd-boot at its own partition
      s390x: ensure SecureExecution is enabled before sd-boot generation
      s390x: fail on error during reading of SecureExecution sysfs flag
      s390x: do not unpack existing initrd, just append LUKS keys to its copy

Saqib Ali (2):
      ostree-systroot-deploy: parse bls-append-except-default key
      man/ostree.repo-config.xml: add docs for bls-append-except-default key

Yosuke Matsumura (1):
      man: Fix ostree-admin-instutil subcommands

dependabot[bot] (1):
      build(deps): bump libglnx from `c71f7ae` to `c59eb27`

ostree - 2022.3

Published by cgwalters over 2 years ago

A big patch landed to update our baseline GLib requirement to 2.66
(in preparation for a libsoup update, which is also coming). Thanks
so much to Daniel Kolesa!

Various test suite improvements and documentation improvements;
we now publish man pages! Thanks Dan Nicholson.

How to use Linux IMA with ostree is now documented - this
I think is a key point in helping "bridge" between the original
goal of ostree being a "flexible" Linux system with the stronger
security guarantees of other systems that use e.g. dm-verity.
More to come here!

A few static analyzer fixes (nothing critical). Some improvements
to the test suite.

As far as bugfixes, there's a notable one to the OstreeRepoAutoTransaction
refcounting that showed up in valgrind.

And last but not least, we finally closed a longstanding conflict
between ostree and per-machine SELinux policy customizations; ostree
learned how to use bubblewrap to create a container targeting
the pending deployment to re-build the policy if necessary.

Thanks so much to all contributors!

Colin Walters (17):
      configure: post-release version bump
      tmpfiles: Create `/run/ostree`
      tests: Stop using inventory crate
      Update to nix 0.23
      Update to ostree-ext 0.6
      Update to rand 0.8
      ci: Disable Ubuntu LTS
      ci: Update docs workflow to use fcos-buildroot
      Update to sh-inline 0.2
      deploy: Be a bit more verbose about SELinux bits
      libarchive: Handle `archive_entry_symlink()` returning NULL
      fetcher/curl: Consistently check return value `curl_easy_setopt`
      ci: Mask zincati for synthetic update
      docs: Add new IMA document
      Update docs/ima.md
      Add an `ostree-boot-complete.service` to propagate staging failures
      Release 2022.3

Damiano Donati (1):
      README.md: update ostree-rs language binding link

Dan Nicholson (5):
      man: Remove unnecessary nbsp's from ostree man page
      man: Allow building HTML man pages
      man: Use custom XSL stylesheet for HTML output
      man: Create an HTML index
      docs: Publish man pages

Daniel Kolesa (1):
      glib: bump glib requirement to 2.66 and port to GUri

Jan Tojnar (1):
      tests/test-cli-extensions: Fix with single-binary coreutils

Joe Talbott (1):
      Add Fedora Kinoite link to index.md also.

Luca BRUNO (2):
      apidoc: add missing page includes
      tests: move fixture to fix installed tests

Ondrej Mosnacek (1):
      deploy: Try to rebuild policy in new deployment if needed

Philip Withnall (1):
      ostree-repo-pull: Take correct out path on error

Simon McVittie (5):
      s390x-se-luks-gencpio: Fix shebang syntax
      s390x-se-luks-gencpio: Use interoperable path for bash
      test-prune: Read to the end of cut(1) output
      repo: Factor out _ostree_repo_auto_transaction_new()
      repo: Correctly initialize refcount of temporary transaction


Git-EVTag-v0-SHA512: 1e1ef032836c9b65dcd4de8140e4b742e73b87432c7ffa47cc7cc47e95a74680ff03f872295f8e4af316869ceabcfb74a65ec447bf005998ad1a2220fc5bbfbb
-----BEGIN PGP SIGNATURE-----

iQFHBAABCgAxFiEEq5KKnPjdBikJw3u93EX9WSHBPwsFAmJyzoYTHHdhbHRlcnNA
dmVyYnVtLm9yZwAKCRDcRf1ZIcE/C0f1B/9Zk7vSRF7HT+ErhcRmrFyTeC2bzl+C
D2lv4K4QLtwo2LgSm06GtztRIxqCGE+8g4G68VPqbh+BZ9i4HXaiI8bfIPQTCY2w
c2ITP81hdAZ23Ns8o/8qbF18usCVpjTyhzBHmgVbq+MSzsfjfjZE1yqxup2VYn1k
4T8UOQVJA2YR3TJkLLzsca1py8UkRkV9qfaTn6+VG6msuscUNrTHUkuc6kzsG6nd
Lsc8ijecusvyxpmwWHJ0LdBpBiC5mbzCdw2kIF10cl1XzNUI/2n2j26RmNx/RoW0
4Paib05G8o567PhawY653lPLP3+/SQ2HLVCQPoAv4lEL13yZ1QOVe2vO
=dt+M
-----END PGP SIGNATURE-----
Package Rankings
Top 3.87% on Alpine-v3.14
Top 3.49% on Alpine-v3.16
Top 8.07% on Alpine-v3.8
Top 3.51% on Alpine-v3.18
Top 6.74% on Alpine-v3.15
Top 4.33% on Alpine-v3.17
Top 8.17% on Proxy.golang.org
Top 3.41% on Alpine-v3.12
Top 5.36% on Alpine-v3.11
Top 4.79% on Alpine-v3.13
Top 4.92% on Alpine-v3.10
Top 4.59% on Alpine-edge
Top 3.25% on Alpine-v3.9
Top 7.48% on Crates.io