Operating system and container binary deployment and upgrades
OTHER License
Bot releases are hidden (Show)
A relatively minor release; this has a bugfix for "transient-etc" users, and a new ostree.prepare-root.composefs
kernel option that allows dynamic overrides for the composefs state. There's also a new API to directly create a composefs from an ostree commit.
/boot/ostree
by @cgwalters in https://github.com/ostreedev/ostree/pull/3258
Before=systemd-sysusers.service
by @cgwalters in https://github.com/ostreedev/ostree/pull/3269
Full Changelog: https://github.com/ostreedev/ostree/compare/v2024.6...v2024.7
Published by jmarrero 5 months ago
This release brings us various bug fixes on top of enhancements to ci, docs and tests.
What's Changed:
Alexander Larsson (3):
_ostree_ensure_fsverity: Properly check for errors
prepare-root: Handle non-AB aboot properly
Fix _ostree_ensure_fsverity reporting of supports in early exit
Colin Walters (12):
configure: post-release version bump
curl: Also map HTTP errors for retries
sepolicy: Add missing `(nullable)`
init-fs: Add --epoch
init-fs: Add --epoch=2
tests: Skip composefs tests without the feature
ci: Drop `SKIP_INSTALLDEPS=1`
Switch to external composefs
ci: Only run clang-format on ubuntu-stable GH runner
ci: Also skip if we detect /run/.containerenv
sysroot: Handle `/ostree/deploy` having epoch 0
docs: Describe offline updates with static deltas
Dan Nicholson (2):
tests: Correctly skip single fsverity test
repo: Make summary and signature mtime match
Eric Curtin (3):
README & docs: Remove "RHIVOS" acronym
docs: More accurate diagram in bootloaders documentation for aboot
docs: Fix spelling and grammer
Jonathan Lebon (1):
ostree-prepare-root.service: add OnFailureJobMode=isolate
Joseph Marrero (3):
ostree-sysroot-deploy: check if deployments are in the same stateroot.
Release 2024.6
configure: post-release version bump
Full Changelog: https://github.com/ostreedev/ostree/compare/v2024.5...v2024.6
Published by cgwalters 7 months ago
Full Changelog: https://github.com/ostreedev/ostree/compare/v2024.4...v2024.5
Published by cgwalters 8 months ago
Full Changelog: https://github.com/ostreedev/ostree/compare/v2024.3...v2024.4
Published by cgwalters 8 months ago
This release changes how /var
works (again):
VOLUME /var
by @cgwalters in https://github.com/ostreedev/ostree/pull/3166
The mount setup also had a semantic change for those enabling root.transient
:
Also related to prepare-root, it is now recommend to enable composefs by simply configuring ostree-prepare-root.conf
and not the ex-integrity.composefs
variable:
Full Changelog: https://github.com/ostreedev/ostree/compare/v2024.2...v2024.3
Published by cgwalters 8 months ago
The ostree admin pin
command learned more human-consumable verbs:
/run/ostree
by @cgwalters in https://github.com/ostreedev/ostree/pull/3147
/boot
if bootprefix is enabled by @cgwalters in https://github.com/ostreedev/ostree/pull/3157
sysroot.bootprefix
by default by @cgwalters in https://github.com/ostreedev/ostree/pull/3156
sysroot.bootprefix
by default" by @cgwalters in https://github.com/ostreedev/ostree/pull/3159
Full Changelog: https://github.com/ostreedev/ostree/compare/v2024.1...v2024.2
Published by cgwalters 9 months ago
There are two major new APIs around configuring mutability and persistence of the root filesystem.
First, OSTree gained support for a new root.transient
flag that makes /
an overlayfs
that is persistent across reboots but not across upgrades. This makes the system behave a bit more similarly to e.g. Docker and following tools such as podman and Kubernetes.
There is a different approach in the (still classified as experimental) [email protected]
unit:
This approach instead allows operating systems or downstream builders to choose to apply persistent merge semantics to specific targeted directories (e.g. /opt
).
Release 2023.8 by @cgwalters in https://github.com/ostreedev/ostree/pull/3111
Update Torizon information by @leonheldattoradex in https://github.com/ostreedev/ostree/pull/3112
doc: Add section about ostree and bootloaders by @jmarrero in https://github.com/ostreedev/ostree/pull/3116
Link to gardenlinux/ostree-image-builder in README by @fwilhe in https://github.com/ostreedev/ostree/pull/3121
deploy: Log calculated needed space by @cgwalters in https://github.com/ostreedev/ostree/pull/3123
rust: Add missing feature versions by @cgwalters in https://github.com/ostreedev/ostree/pull/3124
switchroot: Be explicit about what could cause /sysroot to be ro by @ericcurtin in https://github.com/ostreedev/ostree/pull/3125
zipl: A few fixes by @cgwalters in https://github.com/ostreedev/ostree/pull/3119
docs/composefs: Add note about toplevel dirs by @cgwalters in https://github.com/ostreedev/ostree/pull/3127
switchroot: use shared constant for unlock --hotfix by @cgwalters in https://github.com/ostreedev/ostree/pull/3128
status: Fix build without GPGME by @ericcurtin in https://github.com/ostreedev/ostree/pull/3132
systemd/ostree-boot-complete: Start earlier by @cgwalters in https://github.com/ostreedev/ostree/pull/3133
status: Introduce tool to quickly check if we are booted as default by @ericcurtin in https://github.com/ostreedev/ostree/pull/3134
status: Rename query-booted to is-default by @ericcurtin in https://github.com/ostreedev/ostree/pull/3136
doc: Add section about ostree and aboot by @ericcurtin in https://github.com/ostreedev/ostree/pull/3135
Full Changelog: https://github.com/ostreedev/ostree/compare/v2023.8...v2024.1
Published by cgwalters 11 months ago
This release stabilizes "deployment finalization locking" which
is very useful for automatic update workflows.
There's a new post-copy
command which may be useful for build
systems that generate a filesystem tree outside of ostree:
ostree admin post-copy
command by @alexlarsson in https://github.com/ostreedev/ostree/pull/309
The commit logic started using reflinks (if available) which
can be a big speedup.
System root and bootloader:
Finally, ostree now ships a tmpfiles.d
fragment which copies from /usr/share/factory/var
to /var
by default:
/usr/share/factory/var
to /var
by @cgwalters in https://github.com/ostreedev/ostree/pull/3103
Published by cgwalters almost 1 year ago
A variety of things here. I think the new support for a "transient etc"
will be appreciated in many places. Note that to work with SELinux
the build system side needs to ensure the labels on /usr/etc
match /etc
.
Another important change is that the ostree HTTP layer now retries requests
by default; this closes a very longstanding RFE.
Also on the pull side, a longstanding bug was fixed where we'd still
try to fetch "loose" objects even when we were doing a delta pull.
There's a variety of clang-analyzer fixes (some false positives, some real
memory leaks, etc).
Even more in the below log; thanks to all contributors!
g_return_if_fail
to g_assert()
by @cgwalters in https://github.com/ostreedev/ostree/pull/3020
c02eb59
to 54ad67d
by @dependabot in https://github.com/ostreedev/ostree/pull/3023
sync
by default by @cgwalters in https://github.com/ostreedev/ostree/pull/2968
1aed878
to 597a766
by @dependabot in https://github.com/ostreedev/ostree/pull/3018
597a766
to d085fbf
by @dependabot in https://github.com/ostreedev/ostree/pull/3028
d085fbf
to af86742
by @dependabot in https://github.com/ostreedev/ostree/pull/3030
include
by @cgwalters in https://github.com/ostreedev/ostree/pull/3039
54ad67d
to aff1eea
by @dependabot in https://github.com/ostreedev/ostree/pull/3047
af86742
to cca8be4
by @dependabot in https://github.com/ostreedev/ostree/pull/3046
Full Changelog: https://github.com/ostreedev/ostree/compare/v2023.6...v2023.7
Published by cgwalters about 1 year ago
If ostree is compiled with OpenSSL support (as it is on e.g. Fedora derivatives), this also enables an OpenSSL-backed implementation of the ed25519 signature support. Previously, this required libsodium - which can still be used if desired instead of openssl.
On systems with sufficiently new glibc and fsverity, ostree enables support for composefs at build time. It continues to be disabled by default at runtime.
There is support for an "initramfs root binding key" that can be injected into the initramfs, and used to verify the ostree commit (including its embedded composefs checksum). One suggested model is to follow how e.g. Fedora signs kernel modules with a transient throwaway key. For more, please see the ostree/composefs doc.
Note that composefs continues to be classified as experimental.
The old ot-composefs
kernel argument is no longer honored in favor of a configuration file that should be present in the initramfs.
/etc/ostree/prepare-root.conf
sysroot.readonly
flag can now also be configured from here, and this is recommended/run/ostree-booted
is now non-empty, and contains serialized state (this is an implementation detail)ostree-prepare-root
has a new man page which documents the previous state, along with the aboveA long-overdue CLI verb to change the default deployment for the next boot.
/usr/etc
with an empty /etc
. This is preparatory for supporting a transient /etc
.sync
timeout at shutdownostree admin deploy
now honors --stateroot
as we prefer that term over --os
The remnants of the deprecated ostree trivial-httpd
CLI are now completely gone.
Alexander Larsson (8):
tests: Fix composefs test
sign-ed25519: Drop some uses of libsodium
sign-ed25519: Implement sign and verify using openssl
CI: Enable --with-crypto=openssl on debian testing to test openssl signatures
libotutil: Link to crypto libs
ostree-prepare-root: Validate ed25519 signatures when requested
Read composefs configuration from initrd instead of commandline
prepare-root: Only support base64 formated public key files
Colin Walters (84):
tests/transactionality: Port a bit to xshell
tests: Drop unused alias
tests: Enable mtime test
docs: Update user and group section
Separate prepare-root static path
prepare-root: Link to glib
configure: post-release version bump
Drop "ostree trivial-httpd" CLI, move to tests directory
fetcher: Always open tmpfiles in repo (except on FUSE)
show: Add --print-hex
build-sys: Add libsodium to OT_DEP_CRYPTO
Factor out a libotcore
build: Drop `make syntax-check`
Add an internal constant for the composefs image name
prepare-root: Use otutil and g_print
prepare-root: Drop unused verity flag querying
sysroot: Add some error prefixing for bootversion
prepare-root: Use constant for ed25519 signature
prepare-root: Add metadata for composefs to `/run/ostree-booted`
remount: Don't overwrite /run/ostree-booted
remount: Use new metadata in `/run/ostree-booted` for composefs
prepare-root: Drop dead `pivot_root` code
Use /run/ostree-booted metadata for sysroot-ro state passing
man: Add ostree-prepare-root
mount: Fix gcc -fanalyzer warning for parsing androidboot.slot_suffix
build-sys: Enable composefs at *build time* by default
prepare-root: Refactor composefs config handling
commit: Add `--sign-from-file`
tests: Remove dead references to "SEED"
sign-ed25519: More verbose errors for invalid length
sign-ed25519: Add some comments for data structure
sign-ed25519: Don't set sk unless we've validated it
generator: Deduplicate ostree= karg parsing
prepare-root: Drop code mounting `/proc`
prepare-root: Drop more dead code
Add an always-on `inode64` feature
composefs: Use lowerdir in /run
generator: Stop creating `/run/ostree-booted`
src/generator: Move all logic into libostree-1.so
kernel-args: Move private functions out of public header
sysroot: Add a bit more error prefixing
repo: Clarify when we fail to parse a remote
prepare-root: Introduce `ostree/prepare-root.conf`
prepare-root: Default sysroot.readonly=true if composefs
prepare-root: Don't parse target root when composefs enabled
tree-wide: Consistently `(void)g_variant_lookup()`
core, switchroot: Harden a bit against `g_variant_get_data() == NULL`
checksum-utils: Add an assertion that `buf != NULL`
deploy: Be way more verbose about what we're doing
tests/destructive: Turn off global sync()
deploy: Support an empty `/etc` and populated `/usr/etc`
composefs: Only call `_get_symlink_target()` on symlinks
os-init: Create a mount namespace
Add `admin set-default`
More fully drop `trivial-httpd` entrypoint
deploy: Fix mutex locking for global sync timeout
README.md: Drop dead mailing list, link to GH discussions
prepare-root: Use declare-and-initialize
prepare-root: Check for empty string, not strlen > 0
prepare-root: Use ptrarray, not linked list
switchroot,generator: Only read /proc/cmdline once
deploy: Add some error prefixing
prepare-root: Minor clarifications
repo: Bump lock timeout to 5 minutes
Add `ostree admin stateroot-init` as alias for `os-init`
admin-deploy: Add `--stateroot` as alias for `--os`
admin: Port to c99 style
remote-add: Port to c99 style
lzma: Port to C99 style
checkout: Port to C99 style
cli/set-origin: Port to C99 style
tests/destructive: Port more to xshell
build-sys: Disable composefs on too-old Linux headers
tests: Add otcore unit tests
tests/inst: Update to latest ostree-ext
cmd/init: Port to C99 style
cmd/grub2-generate: Port to C99 style
Move prepare-root karg helpers into otcore, add unit tests
deploy: Add bootloader-naming-2 opt-init
ci: Add c9s build
build-sys: Look for both linux/mount.h and sys/mount.h
build-sys: Really fix composefs check
Release 2023.6
configure: post-release version bump
Eric Curtin (6):
android-boot: Remove dependency on ostree= karg, use androidboot.slot_suffix=
Remove steal_pointer and steal_pointer_impl as we link in glib now
bootloader: fold all Android Bootloader specific logic into prepare-root
prepare-root: On a non-A/B androidboot system, boot system slot a
prepare-root: Changes made to find_proc_cmdline_key
prepare-root: If composefs is configured as "maybe" don't fail
dependabot[bot] (5):
build(deps): bump composefs from `412cb5e` to `ac729b5`
build(deps): bump composefs from `ac729b5` to `1704f82`
build(deps): bump libglnx from `07e3e49` to `c02eb59`
build(deps): bump composefs from `1704f82` to `a6e827d`
build(deps): bump composefs from `a6e827d` to `1aed878`
samcday (1):
docs: update boot loader spec link
Published by cgwalters over 1 year ago
This is a bugfix release for the recent 2023.4.
c9188cd
to 08bdb03
by @dependabot in https://github.com/ostreedev/ostree/pull/2892
08bdb03
to 412cb5e
by @dependabot in https://github.com/ostreedev/ostree/pull/2899
Full Changelog: https://github.com/ostreedev/ostree/compare/v2023.4...v2023.5
Published by cgwalters over 1 year ago
This is a simple patch that is a candidate for backporting to e.g. stable distribution/OS versions of ostree.
See the documentation.
fallocate
for early prune space check by @jlebon in https://github.com/ostreedev/ostree/pull/2866
af8e1a7
to c9188cd
by @dependabot in https://github.com/ostreedev/ostree/pull/2881
Full Changelog: https://github.com/ostreedev/ostree/compare/v2023.3...v2023.4
Published by jmarrero over 1 year ago
Release 2023.3
NOTE: As usual, some of these commits are actually for the Rust bindings,
which are versioned and released separately.
Colin Walters (14):
configure: post-release version bump
treegen: Require at least one mutation
ci: Turn off errors for deprecated-declarations
ci: Drop workaround for fedora-release-container
rust: Bump MSRV to 1.64
build-sys: Squash automake conditional warning re `.PHONY`
Add clang formatting infrastructure
lib: clang-format `ostree.h`
tree-wide: Fix various include ordering issues
lib: Fix one include
clang-format: Don't align backslashes
tree-wide: Run clang-format
ci: Validate clang-format
tests/inst: Add xshell and use it in one place
Dan Nicholson (3):
tests: Ensure real GIO backends aren't used
ci: Add test configuration with soup3
fetcher/soup3: Rewrite without threads
Daniel Kolesa (1):
fetcher: add libsoup3 backend
Jonathan Lebon (10):
lib/sysroot-cleanup: Convert bootdir listing to dfd-relative
lib/sysroot-cleanup: Make some static utility functions global
lib/sysroot-cleanup: Drop dead code
lib/sysroot-cleanup: Factor out bootfs cleanup
lib/sysroot-cleanup: Make bootfs cleanup function global
libotutil: add utility functions for calculating directory size
lib/sysroot-deploy: Nuke `finalize-failure.stamp` on successful finalization
tests/kola: delete unused .gitignore
tests/kolainst: Add `make localinstall`
lib/sysroot-deploy: Add experimental support for automatic early prune
Joseph Marrero (2):
Release 2023.3
configure: post-release version bump
Philip Withnall (1):
lib/fetcher: Add some debugging messages to the libsoup request path
Full Changelog: https://github.com/ostreedev/ostree/compare/v2023.2...v2023.3
Published by cgwalters over 1 year ago
Release 2023.2
NOTE: As usual, some of these commits are actually for the Rust bindings,
which are versioned and released separately.
Though speaking of bindings in general,
there's a lot of cleanup that landed to the annotations around
nullability in general, which should improve ergonomics. These
changes will be reflected in a future release of the Rust bindings
specifically too.
Otherwise, we have some small tweaks and improvements in various places,
from a performance improvement in commits to test suite fixes.
A notable thing that landed here is fixes for recent GLibs introducing
warnings around unset standard::size
.
Thanks to all contributors!
Colin Walters (18):
Add `sysroot.bootprefix` option
deploy: Use `semodule --refresh` if available
configure: post-release version bump
Release rust/ bindings 0.17.1
rust-bindings: Regenerate for 2023.1
rust-bindings: `Sysroot` is `Send`
itest-pull-space: Use mkfs.ext4, align to at least 512b
tests: Set size on fileinfo
Enable `trust_return_value_nullability`
Add docs and fix annotations for ostree-repo-file.c
rust: Bump semver
lib: Fix two nullable annotations
repo: Fix nullability for remote options
rust: Renerate bindings
Revert "repo: Fix nullability for remote options"
rust-bindings: Regenerate
Release 2023.2
configure: post-release version bump
Corentin Noël (3):
build: Do not include private headers in the introspection
libostree: Ignore new_and_connect in the introspection
libostree: Enhance the annotation coverage
Evan Anderson (1):
core: Ensure glib standard::size attribute is always set
Jonathan Lebon (1):
ci: update for new kolaTestIso()
Philip Withnall (1):
lib/fetcher-util: Wake up main context when a request is complete
Seppo Yli-Olli (1):
Increase buffer size for create_regular_tmpfile_linkable_with_content
Simon McVittie (5):
tests: Ensure non-root users have access to libcap tools
ostree_raw_file_to_content_stream: Make size default to 0
_ostree_zlib_file_header_new: Default size to 0
write_content_object: Don't assume file info has standard::size
Use g_steal_fd() in preference to glnx_steal_fd()
Timothée Ravier (1):
docs: Use upstream theme & update to 0.4.1
dependabot[bot] (1):
build(deps): bump libglnx from `4e44fd9` to `07e3e49`
-----BEGIN SSH SIGNATURE-----
U1NIU0lHAAAAAQAAADMAAAALc3NoLWVkMjU1MTkAAAAg5CRAd4pqfdf6DWMgvDhrcq1x8Q
gQPSQHIoZaiiRTt68AAAADZ2l0AAAAAAAAAAZzaGE1MTIAAABTAAAAC3NzaC1lZDI1NTE5
AAAAQJGTvsjNISYt6gOheoejoo2Znn3j11juGWFABJycsMqXxSBRQ7NXOZWJvctyleHVX+
QrLs/Wa0KPgo91tMoenwg=
-----END SSH SIGNATURE-----
Full Changelog: https://github.com/ostreedev/ostree/compare/v2023.1...v2023.2
Published by cgwalters over 1 year ago
Full Changelog: https://github.com/ostreedev/ostree/compare/v2022.7...v2023.1
Published by cgwalters almost 2 years ago
(Some of these commits are actually only for the Rust bindings;
will try to enhance the release flow to more clearly filter
those out)
On the feature front, there's new APIs for idempotent delete operations on
kernel arguments, and for handling unshare()
to
manipulate (otherwise) read-only sysroot.
A few very small memory leak fixes.
Many people will be happy that we now retry HTTP requests after
receiving HTTP 500 errors.
There's a notable bugfix avoiding rebuilding SELinux policy
when creating a first deployment.
Thanks to all contributors!
Colin Walters (18):
Remove readdir-rand
deploy: Don't rebuild selinux policy on first deployment
ci: Bump memory for ISO testing flow
rust: Update to cap-std 1.0
rust: Drop `openat` dependency
ci: Fix case where cosa != buildroot
rust: Update to gio 0.16
repo: Avoid potential double unwind when writing panic value
Allow missing docs on two `glib::wrapper` functions
sysroot: Add an API to initialize with mountns
rust: Regenerate with latest gir and C sources
tests/inst: Update to latest ostree-ext
tests/inst: Drop nix dependency
tests/inst: Update cap-std-ext to 1.0
tests/inst: Update sh-inline
tests: Require OSTREE_TEST_SUDO to be set to use `sudo`
ci: Add a flow that combines C build and Rust integration tests
Release 2022.7
Jonathan Lebon (4):
ci: Bump memory request, use fcosKolaTestIso
ci: Drop unnecessary outer stage
ci: Use new names for custom kola steps
ci: bump cosaPod memory requirement to 5Gi
Luca BRUNO (20):
configure: post-release version bump
lib/repo-checkout: fix typo in error message
lib/bootloader-zipl: check for errors when opening initrd
lib/static-delta: document and check parameters format
rust/tests: fix static delta generation testcase
lib/sign-ed25519: convert invariant checks to assertions
rust: regenerate bindings after latest release (2022.6)
ostree: manually patch generated files
rust: update manual helpers
ci/rust: bump linting toolchain to latest stable (1.64)
lib/repo-refs: properly return an error value
rust: update pinned gir tool to 0.15
rust/ostree-sys: regenerate for gtk-rs 0.15
rust/ostree: regenerate for gtk-rs 0.15
ci/rust: test from git using latest feature
cargo: prepare ostree 0.16.0 and ostree-sys 0.11.0
copr: only use libostree tags
ci: adjust git tags filtering
cargo: bump minimum Rust version to 1.63
ostree: manually patch generated files
Manuel Stühn (1):
Add test for generating static delta to file
Philip Withnall (4):
ot-builtin-commit: Fix a typo in a command line help string
ot-builtin-commit: Don’t mention a C function name in a help string
lib/pull: Fix a small leak when a variable is reused
ot-builtin-pull: Fix a minor leak with progress reporting
Rafael Garcia Ruiz (2):
ostree_kernel_args_contains for OstreeKernelArgs
Idempotent delete operation for OstreeKernelArgs
Ricardo Noriega (2):
Enabling retry for HTTP 500 internal server error
Add tests for cases under random 500s
Simon McVittie (2):
readdir-rand: Copy full size of struct dirent
Replace calls to g_memdup() with g_memdup2()
dependabot[bot] (2):
build(deps): bump libglnx from `26375b5` to `e701578`
build(deps): bump libglnx from `e701578` to `4e44fd9`
Git-EVTag-v0-SHA512: 9cbc7a178f1cc0dbda25ea1af5f9d4991f41c28768826c44cf2d42333c0677b22daaef6532eb075931f6c5622947780daaa1ec4a5fc64e2adef230feaed372c7
Published by lucab about 2 years ago
This release contains a collection of bugfixes and enhancements. Notable fixes concern finalize-staged
, which should now better support automounted partitions and skip waiting for termination signal.
A file descriptor leak has been fixed in the commit logic. The codebase has also been fixed to avoid conflicting declarations when building with latest glibc
(>= 2.36). Thanks @GeorgesStavracas for both fixes!
On the feature side, there is now basic support for handling overlayfs whiteouts on checkout through a new --process-passthrough-whiteouts
flag. This is useful for users that need to carry container storage embedded into ostree commits. Thanks @mangelajo for that!
The ostree rev-parse
command gained a new --single
flag to better support repositories containing exactly one commit.
Overall, the s390x Secure Execution (SE) logic has been reworked to stop relying on glue scripts.
Thanks to all contributors!
Andrea Perotti (1):
Fix recursive git archive reference
Colin Walters (12):
configure: post-release version bump
rust-bindings: Fix `cargo fmt`
deny.toml: Add `Unicode-DFS-2016`
Remove unused `linux/fs.h` includes
Move FIFREEZE/FITHAW ioctl invocations into linuxfsutil.c
cli/rev-parse: Port to new code style
cli/rev-parse: Add `--single` option
rust: Update to latest git
ci: Also drop seccomp on debian testing
rust: Bind `ostree_repo_list_commits_starting_with`
finalize-staged: Don't listen to `SIGTERM`, just let kernel exit us
README.md: Link otto
Dan Nicholson (3):
main: Factor out sysroot loading
finalize-staged: Ensure /boot automount doesn't expire
lib/pull: Fix max-metadata-size documentation
Georges Basile Stavracas Neto (1):
lib/commit: Unref repo on success
Huijing Hei (1):
Fix `ostree admin kargs edit-in-place` assertion when deployments are pending
Jon Oster (1):
docs: Add aktualizr and TorizonCore to related projects
Jonathan Lebon (3):
lib/commit: Directly use FICLONE for payload link
tests/kolainst/staged-deploy: parse `rpm-ostree status --json` instead
docs: Add section about staged deployments
Luca BRUNO (7):
libostree: fix a typo in annotation
lib/bootloader: assert invariants
lib/mtree: drop redundant name checks
otutil: add error handling to variant builders
lib/sign: convert invariant checks to assertions
lib/repo: properly initialize boolean variable
lib/sysroot-deploy: explicitly handle `g_variant_lookup` results
Lukas Kalbertodt (1):
Update to `libtest-mimic` 0.5.0
Miguel Angel Ajo (1):
Support overlayfs whiteouts on checkout
Nikita Dubrovskii (3):
s390x: ensure both 'root' and 'boot' luks keys exist
s390x: simplify 's390x-se-luks-gencpio' script
s390x: use 'libarchive' to modify initrd in SE case
Sam James (1):
buildutil/glibtests.m4: fix bashism
dependabot[bot] (1):
build(deps): bump libglnx from `c59eb27` to `26375b5`
git-bruh (1):
ostree-fetcher-curl: check for HTTP2 support before trying to use it
Published by cgwalters about 2 years ago
This release fixes a denial of service security issue: https://github.com/ostreedev/ostree/security/advisories/GHSA-gqf4-p3gv-g8vw
The core fix is in sign/ed25519: Verify signatures are minimum length
in 83e6357186be11fb8f2a6b66fab3730c44ee59dd which should be an easily backportable commit. (There's some further changes to add test coverage for this that can be ignored)
This only affects builds that use libsodium; it is however remotely reachable (assuming that the client is talking to a compromised server; ordinarily exploiting this would require that or breaking TLS/https). Thanks to @DemiMarie for the report!
Additional highlights are:
ostree prune
on large repositoriesThanks to everyone who contributed!
Chris Mucciolo (1):
docs add debos to readme distribution build tools
Colin Walters (44):
configure: post-release version bump
repo: Optimize memory use of `ostree_repo_list_objects()`
rust: Bump semver, add feature for current release
repo: Further optimize `ostree_repo_list_objects_set()`
ci: Add a flow that does a git libostree + git rust-bindings
prune: Also use object set API in `ostree_repo_prune_from_reachable()`
lib: Fix symbol versioning inheritance
tests/inst: Bump the version of ostree-ext
rust-bindings: Fix repository reference
rust-bindings: use correct README.md
rust-bindings: Update cargo package list
rust: Switch to 2021 edition
ci: Bump MSRV
rust: Use inline `format!` variables in a few places
repo: Document non-obvious way to list all commits
fsck: Don't load all object names into memory
fsck: De-indent loop
fsck: Move most commit processing into helper function
fsck: Use `load_variant_if_exists`
rust-bindings: Wire up `tests/`
cli/os-init: Port to C99 style
cli/undeploy: Port to C99 style
cli/unlock: Port to C99 style
cli/config: Port to C99 style
cli/diff: Port to C99 style
cli/gpg-sign: Port to C99 style
cli/remote-list: Port to C99 style
cli/refs: Port to C99 style
ci/rust: Enable `cap-std-apis` in default build, add a no-feature build
ci/rust: Change MSRV to `cargo check`
Fix clippy lint in cap-std bits
rust: Bump semver to 0.15
Bump to cap-std 0.25 and io-lifetimes 0.7
repo: Metadata return values from `load_file` are not nullable
tests/staged-deploy.sh: Hack around cosa systemd unit check
tests/inst: Port to cap-std
lib: Stop using old `ostree_sysroot_get_repo()` API
deny: Sync with rpm-ostree
deploy: Ensure sysroot is initialized for kargs in place
sysroot: Have `ensure_writable` also always initialize
sysroot: Add a few more assertions about `boot_fd`
sign/ed25519: Verify signatures are minimum length
rust: Add a test case for ed25519
Release 2022.5
Huijing Hei (4):
RFE: Add a hidden option to `ostree admin kargs edit-in-place` to update all existing deployments in place
Fix `ostree admin kargs edit-in-place` fails issue
Add test to verify `ostree admin kargs edit-in-place` working
Update doc about adding new function to libostree
Jonathan Lebon (2):
Drop `.packit.yaml`
tests/inst/destructive: stop disabling fedora-coreos-pinger
Matthias Beyer (1):
Fix link to rust bindings
Nikita Dubrovskii (1):
s390x: rename sd-boot to sdboot
Saqib Ali (2):
lib/prune: speed up pruning by retrieving only commits
ostree-repo: bls-append-except-default followup
Simon McVittie (1):
test-basic-c: Don't assert that extended attributes are available
Full Changelog: https://github.com/ostreedev/ostree/compare/v2022.4...v2022.5
Published by cgwalters over 2 years ago
The big change in this release is that we have merged the Rust bindings repository into the main one:
https://github.com/ostreedev/ostree/pull/2575
As of right now though, this is just (somewhat) simplifying development of the Rust bindings, as we can now more easily share CI configuration and a single PR can add a new API and update the Rust bindings in one step.
As of right now though, the "libostree" C library will still be buildable without depending on Rust itself. We may change that in the future; for more, please see and discuss at: https://github.com/ostreedev/ostree/issues/2427
There are a few other additions in this release:
bls-append-except-default
intended to help with enabling GRUB password lockingColin Walters (80):
configure: post-release version bump
repo: Add concurrency=send
ci: Add GH action to build
Update to 2021.2
Bump versions
Bump sys version requirement
Mark src/auto/* as generated
ci: Fix buildroot to use new official image
Update to glib 0.14
Bump versions
Add 2021.3 feature
Re-export glib, gio
Deny unused results, warn on missing docs (except auto/)
Add new GLib 0.14 variant types for metadata types
Add more documentation for --features=v2021_3
Fix build with --features=v2021_3, use in CI by default
Use glib-sys via re-exported `glib::ffi` (and similar for gio)
Release 0.12.2
lib: Export ffi too
Cargo.toml: Bump to glib 0.14.4
Release 0.12.3
Release 0.13
sys: Release 0.9.0
lib: Reexport libc::AT_FDCWD
Make `SePolicy` have `Send`
repo: Expose dfd_as_file()
(cargo-release) version 0.13.1
(cargo-release) start next development iteration 0.13.2-alpha.0
repo: Add `auto_transaction` and `TransactionGuard`
(cargo-release) version 0.13.2
(cargo-release) version 0.13.3-alpha.1
Update to 2021.5
Bump ostree-sys version
(cargo-release) version 0.13.3
(cargo-release) start next development iteration 0.13.4-alpha.0
repo: Add `require_rev` method
repo: Add an API to read and parse directory metadata
Release 0.13.4
Add a `cap-std-apis` feature with open/create
repo: Add two more cap-std APIs
Add `COMMIT_META_CONTAINER_CMD` constant
Release 0.13.5
Fast-track fix for `ostree_gpg_verify_result_get_all()`
Release 0.13.6
Add manual bindings for MutableTree reading
repo: Add `query_file` API
lib: Run `cargo fmt`
Add a `repo()` accessor to `TransactionGuard`
build-sys: Adjust for merge of ostree-rs
docs/ima: Also link the SUSE docs
cfg.mk: Don't even look at rust-bindings/
Add APIs to get xattrs from disk
tests/inst: Fix install rules for ostree-rs merger
ci: Work around GH actions `container:` + git + security bug
tests/inst: Add .gitignore
ci: Move rust-bindings CI to toplevel
rust-bindings: Remove some unused CI/test bits
Merge pull request #2602 from cgwalters/fix-docs-ci
Merge pull request #2601 from cgwalters/expose-get-xattrs
Merge pull request #2575 from cgwalters/merge-ostree-rs
ci: use cargo-deny
sysroot: Quiet one gcc `-fanalyzer` warning
sysroot: Strengthen several `g_return_if_fail` into `g_assert()`
ci: Drop gcc `-fanalyzer` by default
ci: Drop all `runAsUser: 0` in builds
Merge pull request #2608 from cgwalters/fanalyzer-fixes
ci: Move codestyle and min build to GH actions
Merge pull request #2580 from nikita-dubrovskii/sdboot_partition
Merge pull request #2612 from HuijingHei/deploy-karg-delete
Merge pull request #2605 from saqibali-2k/pr/bls-append
ci: Drop libsoup build in jenkins
ci: Drop an unused files
ci: Add a codestyle.sh
gitignore: Add ci-build/
Rename ostree-cmdprivate to drop out of introspection
Drop `OSTREE_BUILT_FEATURES` from introspection
rust-bindings: Delete committed gir files
rust-bindings: Use OSTree-1.0.gir from our own builddir
rust-bindings: Update to latest git
Release 2022.4
Dusty Mabe (1):
Merge pull request #2614 from nikita-dubrovskii/issue-2867
Felix Krull (357):
Add config file and gir files
Add initial gir output
Add external libraries and regenerate
Update names and dependencies
Add manual definition for stat
Start describing libostree
Add build files for libostree
Generate
Add some basic types and regenerate
Add a prelude module for star imports
Add a test/sample program
Add additional 'new' method to Repo
Add as much of Repo as easily possible
Integrate docs into source
Generate functions and constants
Try implementing traverse_commit by hand
Ignore Cargo.lock in libs
sample: try to extract a file from the repo
Add ObjectName wrapper to solve hashing issues
repo: change custom new method to std::path::Path-alike
repo: remove now-incorrect comment
object_name: extend ObjectName
Add RepoListRefsExtFlags
repo: implement list_refs and list_refs_ext
Add simple repo roundtrip test
Remove sample
Add Makefile
Regenerate libostree-sys
Regenerate libostree
repo: newlines
Add docs to generated files
Copy autodocs to hand-implemented methods in RepoExtManual
Generate docs for RepoExtManual
Ignore internal structs in libostree-sys
Regenerate libostree-sys
Add include to make libostree-sys tests work
Run cargo fmt on the custom code
Explicitly implement PartialEq for ObjectName to satisfy clippy
Exclude generated code from clippy
Un-bump versions
Add workspace Cargo.toml
Add CI config
Install libostree in CI
Use libostree from backports
Also install libostree-dev for libostree builds
Install libostree for everything, actually
Do release build and simply job names
Remove package stage for now
Add some metadata to libostree-sys
Add libostree-sys publish step
Fix libostree-sys publish step
Fix Gitlab URL & remove readme
Add docs build
Always build docs
Only publish for master & set docs urls
Remove release builds
Bump -sys version
Try setting up docs.rs capable build
libostree-sys: switch to docs.rs and add license file
libostree: add metadata, readme, and license file
Disable libostree docs
Strip the libostree docs
Bump -sys version
Add libostree release task
libostree-sys: remove license file
libostree: include API docs at build time using a feature flag
Remove docs targets
Build API docs with LGPL parts
Always build docs
Fix docs build hopefully
Keep only one license file in the repo root
Add a symlink to the package readme in the repo root
Move readme to repo root and copy it to the code prior to packaging
Update docs back to self-hosted
Add Gitlab badge
Bump versions
Add LICENSE to packages
Update readme a lot
Add badge-with-link to docs
Fix -sys pre-package
--allow-dirty to deal with the extra files we copy in
Add back API docs merge to Makefile
Remove lgpl-docs feature
Update readme
Add CMake to build gir
Add features
Move main crate into repo root
Move installed tools into target/tools
Exclude unnecessary files correctly
Update gitlab-ci.yml
Get rid of pre-package workaround
Reorganise gitlab-ci.yml a bit
Move libostree-sys/ to sys/
Remove some methods that are not generated correctly
Test with all features
sys: regenerate
Repo rename
Pin gir version
Remove version constants to fix build with different libostree versions
Remove unnecessary gir/* aliases
Rename libostree-sys to ostree-sys
Rename libostree to ostree
Rename libostree to ostree
Add note about crate rename
Update base gir files
Update OSTree gir and regenerate
Test sys with v2018_9 until I can get 2019.2 for CI
Add explanatory comments to ostree-sys.toml
Fix features in Repo
Build CollectionRef manually
Fix return type for CollectionRef::new
Add some sanity tests for CollectionRef
Sanity test for ObjectName
Fix a few more missing methods
Add some tests for Repo
Fix some issues with RepoFile
Add some explanatory comments to gir config
Pin rustdoc-stripper version
Add more types
sys: regenerate with external version file
Add version features
Update gir version
sys: regenerate with new gir
Add missing version features
Regenerate and update to new gir and glib-rs version
Build with older libostree version for now
Reorganise test code
Switch to generated CollectionRef
Clarify reasons for async exclude
Fix
Add docs for methods that were moved to RepoExtManual
Switch ObjectName to GString
Add some more unsorted types
Refactor tests and add test for traverse_commit
Don't allow nightly runs to fail
Add other interesting pipeline stages
Don't separately build ostree-sys with nightly
Disable CollectionRef tests on too-old features
Suppress unused import warnings in generated code
Try caching
Also cache docs
Add fmt check, check, clippy
Fix gitlab-ci
Don't fmt and check for now
Add html_root_url
Build docs more smartly
Fix docs publish
Change gir targets
Update gir and regenerate
Move extra Repo methods to plain impl as well
Add more checks to the pipeline
Adjust CI check flags
Add test for checkout_tree
Add ignored test for empty FileInfo crash
We don't need to patch the hand-written Repo symbols any more
Improve doc blurb a bit
Document Repo::new_for_path
Clean up some comments
Ignore deprecated (and reportedly unsafe) method
Document ObjectName
collection_ref: add accessors for collection_id and ref_name
Add copies of the various LGPL versions and notes about their relevance
Check that we haven't included extraneous generated files
Remove extraneous generated files
Bump version
Update version in README and add some notes on version bumps
ci: use sccache
Force clippy to run even after check
Oh wait, check doesn't actually do anything useful for us...
Disallow clippy warnings
Ignore clippy issues in generated code
Fix clippy issues
Consolidate some pipeline stages
Simplify docs build
Revert "Simplify docs build"
lib: RepoCheckoutAtOptions
lib: handle ino cache and sepolicy options
lib: satisfy clippy
tests: fix checkout_at tests
ci: run clippy with default features as well
lib: implement CheckoutOptions::filter (hackishly)
tests: fix imports with default features
tests: reorganise repo tests so they have fewer feature flags
lib: split out RepoCheckoutFilter
lib: clean up types for RepoCheckoutFilter
lib: add repo_checkout_filter function for better ergonomics
lib: add docs and safety notes to RepoCheckoutFilter
lib: fix clippy
lib: catch unwinds in RepoCheckoutFilter
lib: brush up some docs
lib: generate some additional classes
ci: add Makefile target to run gir -m not_bound
lib: add some glib types to generate more functions
conf: clean up comments a bit
conf: add some more loose types
Bump version
Add notes about releases and tags
Bump gir version
Update to new glib-rs versions
Enable futures feature
ci: add job for futures feature
conf: remove a problematic function that was fixed in gir
ci: fix futures job maybe
Fix tests on nightly (by avoiding UB, even)
ci: include `futures` in docs
ci: remove separate futures build
ci: clean up image
ci: still need before_script for docs
ci: fix features for -sys
ci: I guess we did need CMake
ci: fix
ci: use libostree from unstable
Update gir version
Add features for docs.rs build
Enable some functions that seem to work now
Revert "Enable some functions that seem to work now"
ci: fix feature flags
Update gir files
Update OSTree-1.0.gir
Disable build features constant
Regenerate -sys
Ignore BUILT_FEATURES from main crate
Clean up docs.rs sections in Cargo.tomls
Regenerate main crate
ci: bump used version
Add generated KernelArgs (not working yet)
Make kernel_args compile
kernel_args: enable and fix argv methods
kernel_args: fix feature flags
Implement Checksum type for binary checksums
Implement Repo::write_content
Implement Repo::write_metadata
Implement Repo::write_content_async
Implement Repo::write_metadata_async
Add SePolicy::fscreatecon_cleanup
Fix file mode
Use pointer coercion instead of messing with -sys
Implement ostree::checksum_file
Implement ostree::checksum_file_from_input
Implement ostree::checksum_file_async
Implement ostree::checksum_file_at
checksum: implement conversion from string and to base64
checksum: implement more traits and functions
Bump crate versions
ci: fix build
ci: run crates.io publish on release tags
ci: update sccache
ci: switch to Fedora Rawhide
Fix clippy issue
Set up cargo workspace
ci: don't reformat -sys
ci: install make
ci: install sccache during docs build
ci: fix setup, again
Add feature alias for the latest OSTree version
Update bundled glib gir files
Update gir file
Fix lint in tests
Add some ignored types
Bump versions
gir: update OSTree-1.0.gir
Regenerate files
Add 2019.6 feature
Bump versions
Update glib + gir and regenerate
Start taking out futures feature
Rewrite handwritten futures functions
Bump versions
ci: ignore changes in versions.txt lines
Revert "ci: ignore changes in versions.txt lines"
Remove repo hash from versions.txt
ci: disable clippy warnings for the moment
gir: update to OSTree 2020.2 gir
Regenerate for OSTree 2020.2
Bump versions
Bump ostree version
gir-files: update to 2020.3
ci: ignore gir differences in version files
ci: build every feature level separately
ci: install fewer things
ci: simplify pipeline a bit maybe
repo_checkout_at_options: fix version flags
Bump version
Ignore ci-cached directories so they don't interfere with the publish
Add LICENSE to ostree-sys
Change branch name references
gir: update bundled gir files
Start adding more update instructions to README
Regenerate with new gir files
Update gir version and regenerate
Switch from lazy_static to once_cell
Bump dependency versions
gir: patch ostree_repo_finder_avahi_new
conf: disable RepoFinder methods that don't autogenerate correctly
sys: remove pkg-config dependency
Use forked gir with updated shell-words and cleaned-up build.rs
tests: use RepoMode::Archive (seems to be less finicky)
src: use libc::c_char to improve non-x86 compatibility
ci: update sccache
ci: use --workspace instead of --all
ci: test building for non-x86 target
Switch back to upstream gir
ci: change docs build command
Update rustdoc-stripper
ci: refactor pipeline
ci: update readme (and pipeline)
Add command to grab latest OSTree-1.0.gir from Fedora Rawhide
Also remove OSTree-1.0.gir when cleaning gir files
Add Vagrantfile
Bump versions
Fix indentation in readme
Add script to get OSTree-1.0.gir from libostree source build
Update to OSTree 2020.4
Add feature levels to Cargo.toml
Update docs
ci: try different Fedora image?
PATCH: version on ostree_repo_commit_modifier_set_sepolicy_from_commit
PATCH: version on OSTREE_SIGN_NAME_ED25519
PATCH: versions on ostree_sign_* functions
Switch ostree source to git
gir: switch to gir based on patched upstream source
gir: start fixing OSTree.Sign
gir: add missing version tag
gir: fix out parameters not being marked correctly
gir: fix another out parameter
sign: add sanity check for sign API
conf: disable internal Sign subtypes
Update to OSTree 2020.5
Disable some irrelevant functions
src: add CommitSizesEntry
conf: remove some unfixable TODOs
Makefile: only depend on gir bin in gir-report
src: add support for write_deployments_with_options
src: reimplement checksum hex and base64 en/decoding
conf: annotate ignores better
src: add Checksum::from_bytes
conf: ignore some more special-cased functions
Bump versions
conf: anchor function name patterns to avoid unexpected exclusions
Update gir file to 2020.6
gir: update misc gir files
gir: update OSTree gir
Regenerate based on new gir
Switch to patched ostree gir
ci: fix rawhide stages?
src: manually implement SysrootDeployTreeOpts
src: fix tests
Remove outdated sentence in readme
Bump versions
Update common gir files
Fix ostree gir file update
Update OSTree-1.0.gir to 2021.1
Regenerate
Switch to patched ostree gir
Regenerate
Bump all versions
Update rustdoc-stripper
Huijing Hei (3):
Teach --karg-delete option to ostree admin deploy
Fix GNU style of two spaces for indent in https://github.com/ostreedev/ostree/pull/2612
Remove dup "--os=OSNAME" line in output of "ostree admin config-diff --help"
James Westman (1):
Fix annotations on ostree_mutable_tree_lookup()
Jonathan Lebon (7):
Merge pull request #2596 from cgwalters/release-2022-3
Merge pull request #2615 from nikita-dubrovskii/handle_errors
copr: mark git checkout as safe
Merge pull request #2619 from nikita-dubrovskii/skip_gzip_unpacking
Merge pull request #2621 from cgwalters/drop-jenkins-soup
Merge pull request #2622 from cgwalters/more-ci
Merge pull request #2627 from cgwalters/bindings-drop-committed-gir
Joseph Marrero Corchado (6):
Merge pull request #2598 from lucab/ups/without-systemd-fix
Merge pull request #2600 from cgwalters/link-suse-ima
Merge pull request #2603 from cgwalters/use-cargo-deny
Merge pull request #2610 from cgwalters/ci-tweaks-2
Merge pull request #2624 from cgwalters/misc-introspection-fixes
Merge pull request #2625 from cgwalters/drop-features-introspection
Luca BRUNO (21):
lib/ostree-sysroot-deploy: add a missing include for stdint.h
ci/github: add a job for --without-libsystemd
repo_transaction_stats: move to a manual implementation
cargo: fix version in features chain
lib: fix 'dox' feature
cargo: point to docs.rs and clean up
ostree: release 0.12.1
cargo: bump ostree-sys to 0.8.1
sysroot: add a builder object
sysroot: support create and load actions on builder
sys/cargo: refresh manifest
lib: fix new clippy warnings
lib: run rustfmt
ci: add jobs for MSRV checks and linting
gir-files: bump to v2022.2
ostree-sys: refresh after gir bump
ostree-sys: release 0.9.2
ostree/cargo: bump to ostree-sys 0.9.2
ostree: refresh after gir bump
ostree: manually patch generated files
ostree: release 0.13.7
Luca Bruno (5):
Merge pull request #2606 from ostreedev/dependabot/submodules/libglnx-c59eb27
Merge pull request #2616 from HuijingHei/dup-osname
Merge pull request #2618 from jlebon/pr/copr-fix
Merge pull request #2613 from GuiltyDoggy/man-update
Merge pull request #2620 from jameswestman/lookup-annotations
Manuel Stühn (5):
implement list_objects-function an test
switch from if-else to match
update result type
add ObjectDetails-struct and use it in list_objects-function
Update impl Display, omit to_string, change wording
Nikita Dubrovskii (4):
s390x: generate sd-boot at its own partition
s390x: ensure SecureExecution is enabled before sd-boot generation
s390x: fail on error during reading of SecureExecution sysfs flag
s390x: do not unpack existing initrd, just append LUKS keys to its copy
Saqib Ali (2):
ostree-systroot-deploy: parse bls-append-except-default key
man/ostree.repo-config.xml: add docs for bls-append-except-default key
Yosuke Matsumura (1):
man: Fix ostree-admin-instutil subcommands
dependabot[bot] (1):
build(deps): bump libglnx from `c71f7ae` to `c59eb27`
Published by cgwalters over 2 years ago
A big patch landed to update our baseline GLib requirement to 2.66
(in preparation for a libsoup update, which is also coming). Thanks
so much to Daniel Kolesa!
Various test suite improvements and documentation improvements;
we now publish man pages! Thanks Dan Nicholson.
How to use Linux IMA with ostree is now documented - this
I think is a key point in helping "bridge" between the original
goal of ostree being a "flexible" Linux system with the stronger
security guarantees of other systems that use e.g. dm-verity.
More to come here!
A few static analyzer fixes (nothing critical). Some improvements
to the test suite.
As far as bugfixes, there's a notable one to the OstreeRepoAutoTransaction
refcounting that showed up in valgrind.
And last but not least, we finally closed a longstanding conflict
between ostree and per-machine SELinux policy customizations; ostree
learned how to use bubblewrap to create a container targeting
the pending deployment to re-build the policy if necessary.
Thanks so much to all contributors!
Colin Walters (17):
configure: post-release version bump
tmpfiles: Create `/run/ostree`
tests: Stop using inventory crate
Update to nix 0.23
Update to ostree-ext 0.6
Update to rand 0.8
ci: Disable Ubuntu LTS
ci: Update docs workflow to use fcos-buildroot
Update to sh-inline 0.2
deploy: Be a bit more verbose about SELinux bits
libarchive: Handle `archive_entry_symlink()` returning NULL
fetcher/curl: Consistently check return value `curl_easy_setopt`
ci: Mask zincati for synthetic update
docs: Add new IMA document
Update docs/ima.md
Add an `ostree-boot-complete.service` to propagate staging failures
Release 2022.3
Damiano Donati (1):
README.md: update ostree-rs language binding link
Dan Nicholson (5):
man: Remove unnecessary nbsp's from ostree man page
man: Allow building HTML man pages
man: Use custom XSL stylesheet for HTML output
man: Create an HTML index
docs: Publish man pages
Daniel Kolesa (1):
glib: bump glib requirement to 2.66 and port to GUri
Jan Tojnar (1):
tests/test-cli-extensions: Fix with single-binary coreutils
Joe Talbott (1):
Add Fedora Kinoite link to index.md also.
Luca BRUNO (2):
apidoc: add missing page includes
tests: move fixture to fix installed tests
Ondrej Mosnacek (1):
deploy: Try to rebuild policy in new deployment if needed
Philip Withnall (1):
ostree-repo-pull: Take correct out path on error
Simon McVittie (5):
s390x-se-luks-gencpio: Fix shebang syntax
s390x-se-luks-gencpio: Use interoperable path for bash
test-prune: Read to the end of cut(1) output
repo: Factor out _ostree_repo_auto_transaction_new()
repo: Correctly initialize refcount of temporary transaction
Git-EVTag-v0-SHA512: 1e1ef032836c9b65dcd4de8140e4b742e73b87432c7ffa47cc7cc47e95a74680ff03f872295f8e4af316869ceabcfb74a65ec447bf005998ad1a2220fc5bbfbb
-----BEGIN PGP SIGNATURE-----
iQFHBAABCgAxFiEEq5KKnPjdBikJw3u93EX9WSHBPwsFAmJyzoYTHHdhbHRlcnNA
dmVyYnVtLm9yZwAKCRDcRf1ZIcE/C0f1B/9Zk7vSRF7HT+ErhcRmrFyTeC2bzl+C
D2lv4K4QLtwo2LgSm06GtztRIxqCGE+8g4G68VPqbh+BZ9i4HXaiI8bfIPQTCY2w
c2ITP81hdAZ23Ns8o/8qbF18usCVpjTyhzBHmgVbq+MSzsfjfjZE1yqxup2VYn1k
4T8UOQVJA2YR3TJkLLzsca1py8UkRkV9qfaTn6+VG6msuscUNrTHUkuc6kzsG6nd
Lsc8ijecusvyxpmwWHJ0LdBpBiC5mbzCdw2kIF10cl1XzNUI/2n2j26RmNx/RoW0
4Paib05G8o567PhawY653lPLP3+/SQ2HLVCQPoAv4lEL13yZ1QOVe2vO
=dt+M
-----END PGP SIGNATURE-----