ostree

One of the most notable changes in this release is that we switched
to using a systemd generator for handling /var, which means admins
can now set it up as an explicit mount point. We feel pretty confident
in the code, but do test your specific setup. One note in particular;
the new model (obviously) requires systemd, and while we tried to preserve
the non-systemd path, it wasn't explicitly tested.
Issue: https://github.com/ostreedev/ostree/issues/855

The work to port to a new code style continues rapidly; at this point
most of the library is converted, with just the command line remaining.
I think the new style is a lot more readable now that we rely fully
on __attribute__((cleanup)).

Philip Withnall contributed changes to enhance the OstreeAsyncProgress
reporting API, which I think is going to be quite useful for user
interface frontends (like GNOME Software).
PR: https://github.com/ostreedev/ostree/pull/819

There's a smattering of smaller bugfixes; minor memory leaks, double close()
and the like. In this cycle we also beefed up our CI/testing more - we
now test both Fedora Atomic Host and flatpak more explicitly. Contributions
to extend the suite to other distributions would be appreciated; for example,
tests for ostree-as-host on Debian. Our Travis-executed tests
should be extensible.

Thanks to Dan Nicholson for also fixing some of the test suite for installed
tests, and also contributing introspection fixes for language bindings.

Another feature that involved a lot of internal changes is our handling
for /etc on SELinux-based systems. We now label files as we go rather
than having a more fragile separate relabeling path. This is also
exposed as an API, which is used by rpm-ostree now. I think this
particular change highlights the strength of "libostree" as an API
that can be reused by higher level systems.
PR: https://github.com/ostreedev/ostree/pull/797

Thanks to all contributors!

Colin Walters (62):
      pull: Support deltas for explicit commits
      checkout: Fix bare-user symlink checkouts
      Bump release for 2017.5
      lib/boot: Convert bootconfig parser to new code style
      sysroot: Continue conversion of some simpler functions to new style
      cmdline: Start conversion to new code style
      repo: Optimize bare-user content object reads a bit
      repo/checkout: Finish conversion to new code style
      lib/cleanup: Port some of the cleanup code to fd-relative and new style
      repo: Add a "force copy" flag to checkout
      lib/core: Complete conversion to new code style
      Rename "osname" → "stateroot"
      lib/util: Delete some leftover pre-libglnx directory opening functions
      repo: Drop unused cache variables leftover from pack files
      repo/checkout: Cache lookups of dirmeta objects
      checkout: Merge union/add logic for copies during checkout
      tests: Factor out a libtest-core.sh
      tests/installed: New installed, privileged tests using Fedora AH
      checkout: Add SELinux labeling for checkout, use in deploy
      repo: Port object listing func to use libglnx more + new style
      repo: More porting to new style
      repo: Fix incorrect use of errno() error throwing
      lib/sepolicy: Convert to new code style
      sepolicy: Cache the value of is_selinux_enabled() to work around bug
      lib/checkout: Use TEMP_FAILURE_RETRY()
      ci: Add a context for testing flatpak
      ci: Fix flatpak test pkg install
      checkout: Dedup calls to memcache ref
      repo: Delete the last use of GFile tmp_dir
      tree-wide: Convert to using autoptr(GString) vs g_string_free(...,TRUE)
      Add --enable-installed-tests=exclusive, fix installed case
      utils/checksum: Port to new code style
      fsck: Check for refs missing corresponding commit
      tests: For installed, s/test-/itest-/ to avoid in-tree name clashes
      tests: Migrate test-pull-many.sh to installed on FAH
      ci: Extend FAH rootfs for installed tests
      ci: More flatpak ci fixes
      ci: Move travis scripts from tests/ → ci/
      diff: Port some to new code style
      sysroot: More porting to new code style
      checkout/commit: Use glnx_regfile_copy_bytes() if possible
      lib/prune: Complete porting to new code style
      lib/checkout: Move special case for subpath of file to toplevel
      lib/checkout: Optimize checkout by avoiding OstreeRepoFile recusion
      repo: Fix double close() in summary generation
      lib/repo: Port more of GPG and summary functions to new code style
      checkout: Plug a memleak of the state stringbuf
      tree-wide: Switch tabs ⭾ in various files over to spaces ␠
      lib/checkout: Fix regression in subpath for regular files
      remount: Drop support for auto-tmpfs-on-var; use systemd.volatile=state
      lib/remote: Box OstreeRemote if experimental-api
      lib/repo: Fix double close()
      switchroot/remount: Trim set of remounted filesystems
      switchroot/remount: Check mount status before remounting, be verbose
      Switch to using a systemd generator for /var
      tree-wide: Add a few missing O_CLOEXEC
      lib: Add "open dfd iter handling noent" helper, port tree-wide
      lib/upgrader: Port to new code style
      build: Use cd $(srcdir) instead of `git -C`
      switchroot/generator: Add var.mount to local-fs.target.requires
      lib/pull: Port some functions to new code style
      Release 2017.6

Dan Nicholson (5):
      pull: Fix crash specifying override URL in summary fetch
      commit: Mark ostree_repo_transaction_set_ref* checksums nullable
      pull: Allow additional HTTP headers for summary fetch
      tests: Install libtest-core.sh with installed tests
      tests: Look for trivial-httpd in $libexecdir

Francesco Giannelli (1):
      switchroot: Document a bit more, add demo shell implementation

Jonathan Lebon (2):
      tests/ci-commitmessage-submodules.sh: fix for RHCI
      libglnx: bump and use new helper methods

Krzesimir Nowak (1):
      apidoc: Add missing enums to sections file

Philip Withnall (22):
      ostree: Use G_OPTION_ARG_FILENAME where appropriate
      tests: Ignore some standard automake check output files
      libostree: Rework OstreeAsyncProgress to use GVariants internally
      libostree: Add multiple getter/setter support to OstreeAsyncProgress
      src: Port to new OstreeAsyncProgress atomic API
      libostree: Allow OstreeAsyncProgress:status to be set atomically
      libostree: Get and set OstreeAsyncProgress:status atomically
      libostree: Fix a typo in docs for ostree_repo_pull_with_options()
      libostree: Add missing checks for invalid timestamps
      libostree: Fix potential use of uninitialised memory in progress API
      libostree: Ensure progress keys are all always set
      libostree: Add some additional metadata to the summary file
      libostree: Document endianness of GVariant metadata types
      ostree: Add --view mode to `ostree summary`
      ostree: Improve formatting for well-known summary metadata keys
      ostree: Use #defines for well-known metadata key names
      tests: Add a test for `ostree summary --view`
      tests: Fix regex escaping in test-summary-view.sh
      build: Add --enable-experimental-api configure option for unstable APIs
      libostree: Expose $OSTREE_FEATURES in the pkg-config file
      libostree: Make OstreeRemote a public and internal API
      build: Add -C arguments to some git invocations

Sjoerd Simons (1):
      repo/commit: Fix memory leak

Git-EVTag-v0-SHA512: 47a502039ce8abaa83e5872560846d592fc5e38557a190c3b1101f7ea245a3eeee21be8b9aa39c1ab163dc30072d7ef495b26ba18388d4216421b73e3dfd9372
-----BEGIN PGP SIGNATURE-----

iQEwBAABCgAaBQJZHMGOExx3YWx0ZXJzQHZlcmJ1bS5vcmcACgkQ3EX9WSHBPwt9
LQf/Vu7fVSmtfrlQV6j+uaWeg2sEcYjValgk517aksWBaMlacGbvlYf8N6PESYPv
RcXbv4uNAvHOLKck5yU8iT633f3QpW2gei/IvqIYrV25ePJGhODRs7qGwjkKVVy8
BjEf80AcX/0HT6HGyX0CYLsVJJ8Hg6QSM3dzSMBaqMeWx1HnAK/2pWFQAssUfqRh
6UWWjZfCzW809RqY2efy7nJXDfHDoB4sEFDM8CGs12kQ4tcPJqp6kjMHcuXfC8v9
XZh48yfHb/6o3En4ZTd8cUR7nB5nItnFp+AwXOje7VQa8o2vyiUWvZ8InVJj6/Fx
wZfYgbOcDCfqp++WzsZNhaajBg==
=+xRv
-----END PGP SIGNATURE-----

This is a bugfix release for 2017.4 to fix a regression
that broke flatpak: #798

Colin Walters (2):
      checkout: Fix bare-user symlink checkouts
      Release 2017.5

A notable new feature in this release is a fourth repository
mode: "bare-user-only". This is very similar to bare-user, but
canonicalizes permissions and ignores xattrs. The intended
use of this is for "non-OS" container tools such as flatpak, where one
intentionally discards the traditional file ownership.
(I'm calling this container case "non-OS" to distinguish from other container tools
where one might want to "log in" via PAM and supporting distinct UIDs
inside a single container is valuable)
More information: https://github.com/ostreedev/ostree/pull/750

We have a few new APIs, such as ostree_check_version() which is
important when making use of some of the "API extensions" we have
using GVariant on e.g. ostree_repo_pull_with_options().

The diff is a bit larger due to us switching to a new code style.

Another quite important change is that ostree trivial-httpd is
disabled by default. With a libcurl build, this is the last part
that links to libsoup. It's only needed for unit tests, so can
be subpackaged or discarded. (We're doing the latter for Fedora)

Speaking of curl, we now support --with-openssl which enables
using OpenSSL's libcrypto for SHA256. This can be notably faster.
You likely want this if e.g. libcurl is already linked to OpenSSL
for you. I'm increasingly confident in the curl code, and should
be ready to recommend using it by default in the next release or
two.

Thanks to all contributors!

Alexander Larsson (4):
      Add _ostree_repo_mode_is_bare helper
      Add bare-user-only repo mode
      commit: Add --canonical-permissions argument
      Add basic tests for bare-user-only repo modes

André Klitzing (2):
      Avoid unnecessary includes
      Fix includes if built against musl

Anton Gerasimov (1):
      Define TARGET_PREFIX to use with grub2 deployment

Colin Walters (46):
      Disable "ostree trivial-httpd" by default now
      core: Add runtime ostree_check_version()
      builtin/show: Convert to direct return/decl-after-stmt style
      pull: Squash a `-Wmaybe-uninitialized` warning
      lib: Exclude soup header from introspection
      lib: Squash most of the gtk-doc warnings for missing parameters
      lib: Add a private copy of checksum-instream
      core: Support building with OpenSSL for checksums
      sysroot/deploy: Some cleanup to decl-after-stmt/return FALSE style
      sysroot: Prep refactoring of cleanup logic
      build: Quiet automake warning for bupsplit
      build: Various fixes for openssl build
      Bump libglnx, port a few callers to new error API
      sepolicy: Add ostree_sepolicy_new_at()
      sepolicy: Add better private API for setfscreatecon
      cfg.mk: Add a syntax check for a redundant : in glnx_throw
      repo/refs: Convert to new code style
      sysroot: Add ostree_sysroot_write_deployments_with_options()
      core: Convert some functions to new code style
      build: Dist ostree-sepolicy-private.h
      commit: Prefix error with target object name on failure to write
      repo+tests: Add [core]disable-xattrs=true, use it on overlayfs
      pull: Also skip partial commits for deltas if no summary file
      ci: Enable -Werror=unused-result with -Wp,-D_FORTIFY_SOURCE=2
      sysroot: Don't cache sepolicy
      repo/commit: Change most of this file to new code style
      build: Expose autocleanups unconditionally, start using them
      lib: Fix OSTREE_CHECK_VERSION()
      lib: Delete old GFile path helpers, and migrate single last user
      lib: Delete old unused GFile helpers
      libutil: Delete unused threadpool wrapper
      libutil: Delete unused GVariant I/O functions
      libutil: Delete some unused checksum helper API
      libutil: Delete some unused error handling APIs
      Add Coccinelle usage: one for blacklisting, one for patch collection
      sepolicy: Fix regressions from introduction of sepolicy_new_at()
      Add flag to make SELinux label failure fatal, add hack for /proc
      ci: Add a check that submodule changes include "Update submodule: "
      core: Fix default value of disable_xattrs
      repo/core: Convert some functions to new code style
      soup: Hold a ref to the pending URI during completion processing
      sysroot/deploy: More code style conversion
      curl: Enable pipelining for HTTP/2
      Fix a few gtk-doc warnings
      checkout: Provide useful error with checkout -H and incompat mode
      Release 2017.4

Daniel J Walsh (1):
      sysroot/unlock: Ensure overlay label on /usr is `usr_t`

Erik Larsson (1):
      diff: Add ostree_diff_dirs_with_options(), expose via cmdline

Georges Basile Stavracas Neto (1):
      libostree: add versioning macros

Git-EVTag-v0-SHA512: 71f0649308f04f15eb6a22b4b34c2804d680d5870dd3b6391079fa2be6c0f4df74e7ed4f8abbb461104ad23707ecf38587b187a8bd240a9979e4800c13efce78
-----BEGIN PGP SIGNATURE-----

iQEwBAABCgAaBQJY7npbExx3YWx0ZXJzQHZlcmJ1bS5vcmcACgkQ3EX9WSHBPwuu
tAf+OodLq6R8wuDDJUwOHTHTPlaCW5fZn/MEm3IIpeX7A3Cnr3+t6ZgY4LBtc22Q
w3eHCoHMC181Xr6Rz3RtncRXtMJyvQjanLXDdTCJomkNEi4e4YngMLO1wqQ/5gY+
Dcgo8/u4n5lM9ns5rSxDZ3U+kSkkfVWwkTbDlBYpn5hnrW27k/OSbN4uXqCccjTE
LMRuniUqFaNSy1ia2Sr//6znpoYlaFfL30VEL9GJlvkxsg8c0ToCwnuzcvMP1mM4
SY3noj1LqZ+nVtBTRWDdpY666CdgzPm30OxssVL8fdtXN1MBIWQVBsNmkAvRhFjJ
sRaWwbjxsdQ0TXOmZuaJj3WQrQ==
=iIP/
-----END PGP SIGNATURE-----

A variety of small fixes here. One of the most notable things is
the static delta progress computation is now more accurate; this should
make it easier to write a user interface consuming libostree that displays
how much will be downloaded before initiating it.

Related to this, ostree admin upgrade gained --pull-only and --deploy-only
which makes it easier to write e.g. a systemd timer unit that does background
pulls, but only do a deployment (i.e. upgrade) on administrator/device owner
action. A bit more information in https://github.com/ostreedev/ostree/pull/642
and https://github.com/ostreedev/ostree/issues/640

There are two API additions - it's now possible to configure the progress UI frequency
and the zlib compression level.

Besides that, there are a variety of smaller fixes. My favorite is probably
a small fix for grub2 on ppc64,
so we now have fedora/26/ppc64le/atomic-host.

Thanks to all contributors!

Christian Hergert (1):
      repo/checkout: fix 32-bit builds

Colin Walters (28):
      deltas: Don't put unreadable *from* objects in fallback
      delta-show: Don't dump whole superblock, do show fallback checksums
      repo: Fix static delta progress display
      pull: Explicitly error out if metadata objects are fallbacks
      pull: Fold together deltapart+fallback count for display
      ci: Install PyYAML
      lib: Ensure an error is set in ensure_unlinked() if errno != ENOENT
      libtest: Re-enable quiet mode for building fs tree
      README.md: Add more/clean up links to consuming projects
      libglnx: Re-bump to master due to accidental reversion
      ci: Hard error on all -fsanitize=undefined warnings
      build: Add --with-smack, use it to reset contexts for writing objects
      main: Make ostree --version output YAML (and add gitrev)
      deploy: Correctly use libmount unref() calls rather than free()
      man/repo-config: Document mirrorlist
      tree-wide: Squash noncritical compiler warnings
      deploy/libmount: Fix build with old util-linux 2.23 (CentOS7)
      fetcher: Log failures into journal
      upgrade: Add support for --pull-only and --deploy-only
      grub2: Use g_spawn_sync() rather than GSubprocess to avoid SIGCHLD
      grub2: Use "linux16" only on x86/x86_64
      pull: Use all available commits for delta sources
      fetcher/curl: Fix leaks caught by ASAN
      Allow and start using C99 declaration-after-statement
      repo/checkout: Verify early if src/destination are on same device
      checkout: Support a "pure addition" mode
      repo/checkout: Convert a few functions to new "stmt-decl/FALSE" style
      Release 2017.3

Gatis Paeglis (1):
      deltas: Expose the filename parameter

Georges Basile Stavracas Neto (2):
      repo-pull: add option to set the async update frequency
      ostree: allow setting update frequency from command line

Giuseppe Scrivano (1):
      contrib/golang: rm directory

Jonathan Lebon (2):
      pull: don't use static deltas if archive repo
      libglnx: bump for -Wmaybe-uninitialized fix

Philip Withnall (2):
      build: Fix disabling --enable-man if xsltproc is not available
      libostree: Allow compression level to be set for archive-z2 stream


Git-EVTag-v0-SHA512: 55adebf589a0f2115f0ab3cb3f69b42ba3a08c19b3bf54580c437ac08e336651d54849666ab5718e466bdc99bbbaedca79f91619d6e5db3a0f15849029d33cfe
-----BEGIN PGP SIGNATURE-----

iQEwBAABCgAaBQJYwa5GExx3YWx0ZXJzQHZlcmJ1bS5vcmcACgkQ3EX9WSHBPwvT
ywf/dTxmhHzODOw1cCx+OIb7kNf5THsxfz58RR+mhglzt26pNcoo+qKmSbRafHLi
n7+lt5U3VxucqLqPnxbEgj/1r6LzKZ5ZKyqXivsouSLv/leBm/cIeR1s/6JxL8N1
CHc6v9/AG7U4W9USYhy/PSf8PM1M0RbyeCXRi+tfvIfQRDyVo8JY3VBXxbm9YX3T
rY0GT35yHbbY9J+nMhJvi5jqKuiGa86OvT+pYmOUXIfaD54wmjLwoGGDyXh7Zhnb
rhLCNMe8hXM5PTWoidYloczTkwcw2HiKxS0olb1+hHTekSdOEsS86SxMst9JLXu3
0eTaFMNlKKf26LKYliV4jUI0mA==
=8CIL
-----END PGP SIGNATURE-----

First, this release renames the project to libostree. This best matches
the current usage of the code, where different projects act as client tools.
More information in the pull request.
However - if you're a user of ostree admin upgrade; don't worry, it will
continue to be maintained and there are improvements in the pipeline.

It's possible that there will be an effort to have a "canonical" ostree
client-side daemon in the future.

Moving on, there are some smaller bugfixes and enhancements in this release,
and two big new build-time options.

--with-curl: We now support libcurl as a HTTP backend. This passes all of the
existing tests, and is suitable for evaluation by downstream consumers. Please
give it a try, and it's likely we'll classify it as equally stable as the
libsoup backend within a release or two. Among other features, the libcurl
backend can speak HTTP/2, which can result in substantial speedups in the
non-static-delta case. Another motivation for this is that for rpm-ostree we
already depend on libcurl, which also links to OpenSSL in Fedora. Whereas
libsoup->glib-networking->gnutls, so with this change we'll drop gnutls too.
PR: https://github.com/ostreedev/ostree/pull/641

--enable-rust: This is an experiment in following a similar plan to what Firefox is doing with
Rust. When this build time option is enabled, a very small bit of libostree (the
rsync-style rollsum code) is in Rust, and linked statically into the rest of the
library. There are no plans right now to make this a hard requirement in the
near future. Please let us know if a dependency on Rust would be
a blocker for your usage of libostree. Or conversely, if using Rust is exciting
for you and would make you more likely to contribute, please also let us know that!
There's more information in the pull request.

Thanks to all contributors!

Alexander Larsson (1):
      rofiles-fuse: Support write/read_buf()

Anton Gerasimov (1):
      admin-switch: Don't segfault if there's no remote

Chen Fan (1):
      doc: fix typo in CONTRIBUTING

Colin Walters (19):
      lib: Adjust comments in symbols section for last release
      lib: Prefix GPG errors with the checksum
      travis: Disable tests (but keep builds) on flaky distros
      lib: Move the bupsplit selftest into our test framework
      tests: Add setup for more realistic repo, change pull-many to use
      Rename to libOSTree
      oxidation: Add implementation of bupsplit in Rust
      packaging/: Delete
      lib: Add ostree_repo_reload_config()
      rust: Support `make dist` -> cargo vendor
      repo: Add archive/zlib-level option, drop default compression to 6
      pull: Add queuing into the higher level logic
      fetcher: Drop the libsoup queue
      pull: Show Estimating if we're scanning too
      libcurl backend
      libglnx: Bump
      commit: Support -F/--body-file, like git
      build: Remove .PHONY for Rust shared library
      Release 2017.2

Jonathan Lebon (4):
      trivial-httpd: trivial option help string fixes
      docs: update pulp_ostree link
      trusted.gpg.d: keep in the same location
      fetcher queue: also throttle on outstanding writes

Krisztian Litkey (1):
      libostree: added empty ot_cleanup_{read,write}_archive macros.

Philip Withnall (1):
      ostree-repo: Clarify error behaviour of remote option getters

Simon McVittie (1):
      libostree: Don't distribute generated enumtypes in tarballs

Git-EVTag-v0-SHA512: 1191007c2417ecaae5eded9453e830f1e91532360d44a9d4e9a845ab62491863e0ad1a20437d476172d6867a4b0548ca89ad5715b802c2a9e0f6d53f62f812a8
-----BEGIN PGP SIGNATURE-----

iQEwBAABCgAaBQJYo0urExx3YWx0ZXJzQHZlcmJ1bS5vcmcACgkQ3EX9WSHBPwsi
xQgAgqh6Ncfdalon2ib1RHYzVEl4lqGz+cVRZGCZAl7bdwx8HbAfbS2lGnrSG6RA
o97/Q9rtOfnMjsjFWQpwxt56DXu7s/ULthGOjw7y0f5gp8e2sPcbnbQdOxI9wnyU
v1JjiKD8QmO5u1Dj6rLIMi5WmQFAEsU6TPUcJw95KBHc4e0n9MVfy3gJZV/MO51Y
uT6qAa4MNl3O9Inos4JOqLDYnSLHkLquVqGvebOuRiJfhIcH9BLPsXGe5CWwUTe3
1KVN5lGD0wnBawCnsZiJw7iVG5Nb3lHEz3qIyfVZH2b+eq3gqt+EpXCOia7WeUz8
qfl84nExhadLEhbrGLtl+QpeRw==
=8xvm
-----END PGP SIGNATURE-----

This release has mostly bugfixes, the main new feature is that the prune
command gained more sophistication around selectively pruning branches. We're
planning to use this in Project Atomic work where we want to co-locate both
"development" and "stable" branches in the same repository.

The next release is likely to be more exciting, as we have an additional new
libcurl backend in the works - this release contains some preparatory cleanup
for that.

Thanks to all contributors!

Colin Walters (19):
      docs: Fix ostree.version -> version
      fetcher: Hoist core "mirrored request" API to public
      fetcher: Move high level functions into "fetcher-util"
      fetcher: Split lowlevel API into file/membuf variants
      build-sys: Minor makefile tweaks
      Split trivial-httpd into separate binary
      pull: Rework delta superblock fetches to be async
      trivial-httpd: Daemonize better
      .dir-locals.el: Standard Emacs indentation config
      unlock: Fix description for --hotfix
      tests: Alias assert_not_reached() -> fatal()
      pull: Fix theoretical checksum collision for metadata fetches
      fetcher: Rework API to use strings for tls keys/db
      tests: Don't inject newline in URL
      tests: Loosen error regexp
      libtest: Enable web server logs
      Add support for more selective pruning
      tests: Add a big (many objects) pull
      Release 2017.1

Dan Nicholson (3):
      repo: Fix indentation
      repo: Fix object list keys ownership
      repo: Fix list_objects annotations

Mario Sanchez Prada (1):
      static-delta: Pretend that world unreadable objects are new objects

Paul van Tilburg (1):
      admin: Use execlp() to look for systemctl as the shell would

Simon McVittie (3):
      Fix TAP syntax in test-basic-user.sh, and run it
      Sourced test snippets: remove shebang and make non-executable
      Make corrupt-repo-ref.js executable


Git-EVTag-v0-SHA512: f6a195f995f2269a3312aa57dea7e575cfd38030dc6237590b1c00ebf117666604a149b864a60ab5685d4384b07661dce1960a4d0d230697046ac48e73b7ccfc
-----BEGIN PGP SIGNATURE-----

iQEwBAABCgAaBQJYhm+2Exx3YWx0ZXJzQHZlcmJ1bS5vcmcACgkQ3EX9WSHBPwtM
gQf+PDEGF6JSj82cpfm9j6ghqhUULgiJWS96zR3Y+QGJuyUG12vhh4G+oXgWZ6PC
N8bInWnylzYNYVvfHx8DErIi+GZrILYgDDo2yV+C3GRUUY6POZmTO1NyzPAVDbMV
p/qYKj3w2a5LeZXbl8+hoL/sNcrrpzKJwNdL4j4c5sxhkSrlGtNNVgtkPA+qIUXv
9HolOoa5/JWY1mL8d31US3cOzSFswJPd6M8kki3kqCdTozpD82WbICiWazXepyuS
NdG5V6l7oosYtwcv/TKqo05Omu+DFQd7CoJEKuvZpbLgrwtO7rINvRDXJPvuEEb7
sdYOzUax1YhkgvemDBSLHkyEWg==
=Rwxg
-----END PGP SIGNATURE-----

This release is mostly bugfixes - for example, it cleans up the vast
majority of memory leaks caught by ASAN. We also build without
libsoup again, which is preparatory for a potential addition
of a libcurl HTTP backend.

Another notable change is that we now always checksum individual
objects even when applying static deltas, regardless of whether or not
the summary file is signed. This is part of an ongoing thread about
supporting OCI as a transport layer.

Alexander Larsson (5):
      pull: scan_commit_object() - don't load variant twice
      ostree-repo-traverse: Don't leak floating GVariant
      pull_with_options: Don't leak csum_v
      pull: Don't leak delta superblock variants
      delta compilation: Fix leak

Colin Walters (34):
      [ASAN] delta compilation: More leak fixes
      [ASAN] deltas: Fix minor memory leak
      [ASAN] cmdline: Fix minor leak in delta cmdline entrypoint
      traverse: Use g_hash_table_add
      [ASAN] sysroot: Fix leak/double free of keyfile origin
      [ASAN] metalink: Fix leaks of buffer
      [ASAN] bootconfig: Drop a pointless strdup in parser
      [ASAN] set-origin: Squash a leak
      [ASAN] tests: Fix leaks
      Define and use cleanup helpers for libarchive
      [ASAN] tests: Cleanup all current remaining leaks
      tests: Use G_DEBUG=fatal-warnings here too
      tests/keyfile-utils: Drop tests covering preconditions
      lib: Always checksum content in deltas
      pull: Write .commitpartial for local pulls first too
      lib: Remove unused ostree_metalink_get_uri()
      tree-wide: Use g_hash_table_add() where applicable
      ci: Make all ci tests gating for Homu
      build: Add more default errors
      lib: Ensure we use _GNU_SOURCE in enum templates
      fetcher: Define an abstraction over SoupURI
      build: Make libsoup optional again
      [ASAN] sysroot: Squash a leak in lockfile acquisition
      build: Always do enum scanning now
      tree-wide: Switch to autoptr for GOptionContext
      build: Error if glib isn't found
      repo: Add unconfigured-state to remote config options
      Skip gjs-based tests if ASAN is enabled
      tests: Tweak installed tests to deal with ASAN
      ci: Drop sudo installed tests
      ci: Combine UBSAN and ASAN by default
      lib: Squash last use of GFile deltas_dir
      ci: Rebase to f25
      Release 2016.15

Dan Nicholson (1):
      repo: Fix annotations for remote_fetch_summary functions

Jasper St. Pierre (1):
      ostree-repo-traverse: Remove an accidental print statement

Mario Sanchez Prada (1):
      man: Mention bare-user in manpages, along with the other modes

Simon McVittie (13):
      build: clean up ostree-remount if building without systemd
      ci-build: consistently use yes/no for booleans, not yes/empty
      ci-install: add ci_distro
      travis-ci: put an explicit copyright/license on the scripts
      travis-ci: Use a non-ostree-specific name for the Docker image
      travis-ci: Move helper function to before we start building anything
      travis-ci: cat the test log after successful test runs
      travis-ci: Run `make distcheck` too
      travis-ci: Use "slim" Debian image for testing
      travis-ci: Enable stretch (the future Debian 9), replacing unstable
      travis-ci: document parameter variables
      tests: prepend to an existing LD_LIBRARY_PATH, GI_TYPELIB_PATH
      Terminate individual tests after (10 * $TEST_TIMEOUT_FACTOR) minutes


Git-EVTag-v0-SHA512: 18060109c2493e6a1524e293c8a664b4a8da1f23c6b25761083fc50f806aa06911d8d58171fa2985909ea1e33a011c7d3e0dc824cda54b4699fe8b04e0a1a00d
-----BEGIN PGP SIGNATURE-----

iQEwBAABCgAaBQJYTuJtExx3YWx0ZXJzQHZlcmJ1bS5vcmcACgkQ3EX9WSHBPwsN
DQf/cMQmtVotFK81Lu/NuebOPaKJtaB0gx/TDW0ODJuPO15PTVYBbDLfFwIg4cCG
KtiKp4YVGBeBjK04lLNovrpcZts7xfrRIrUiprAzPfbmDciEChg9LGUEz5WfcI+b
s88Lg+3OHDZbI3M3vdAu9nX02M8Go80lkUshG/SEnAruZg2Kis8l3ciiShKylSVr
X7Ndp3IOHKnut03jcI6SK9BGpSbCx5CHatYnvExYq50DXptWLr9CfQitGDiBtdVk
fMTvSSeZMJSnAp56y0KdentJiRePbYeAyhAUPTrNpgTxlt0WUJeh58qlmV2AHA7l
GUbFLVNinNfOVCS30TmPIADMeA==
=8Pnb
-----END PGP SIGNATURE-----

First, this release adds GPG verification for the commit objects
inside deltas. This was a vulnerability if you are fetching content
over plain HTTP, and is still important if using TLS. More
information is available in the commit
and there is continuing upstream discussion
of transport integrity models.

Also regarding GPG, we now make it easier to use a GPG ASCII key
in a remote configuration.

Another major thing in this release is that we started making more use
of the GCC/Clang sanitizers like
-fsanitize=address, -fsanitize=undefined etc. and numerous small
memory leaks were fixed in particular.

Thanks to all contributors!

Abhay Kadam (1):
      Fix broken link in docs/CONTRIBUTING.md

Alexander Larsson (1):
      commit: Fix reading xattrs from OstreeRepoFile:s

Colin Walters (17):
      travis: Drop debian unstable since we can't fetch packages reliably
      pull: Add support for `http-headers` option
      pull: Redo logic for "scanning"
      lib: Define and use cleanup functions for gpgme
      lib: Split out helper function to create GPG context
      Add "gpgkeypath" option to remotes
      lib: Add an API to GPG verify a commit given a remote
      [UBSAN] deltas: Don't call memset(NULL, NULL, 0) with no xattrs
      [TSAN] main: Stop calling g_set_prgname()
      [TSAN] Rework assertions to always access refcount atomically
      pull: Dedup code for checking for > 0 valid results
      pull: Use new per-remote API for GPG verification
      pull: Do GPG verify commit objects when using deltas
      tests: Support TEST_SKIP_CLEANUP=err
      [ASAN] tests: Fix some memleaks in libarchive importer
      [ASAN] lib: Squash various leaks in library and commandline
      Release 2016.14

Jasper St. Pierre (3):
      ostree-repo: Fix parameter name
      ostree-repo-static-delta-processing: Don't close(-1)
      ostree-repo: Make the lock with a long-lasting FD

Jonathan Lebon (1):
      .redhat-ci.yml: no longer install libubsan & clang

William Manley (1):
      ostree commit: Fix combining trees with multiple --tree=ref arguments


Git-EVTag-v0-SHA512: 6756eef81978c4a9559327972b53019f9ea214ab92af266054d303770e7a60684e73fba0870fda81b5262a0ab3aae3f89d962cd346930932a3c668f081d5726a
-----BEGIN PGP SIGNATURE-----

iQEwBAABCgAaBQJYNcd6Exx3YWx0ZXJzQHZlcmJ1bS5vcmcACgkQ3EX9WSHBPwtu
mgf/Z1rDWdTKAdvnJ4jR4eW2yKJYMrok0QUZXn2Q7MlA/1O0qtY6GudlNdScW9Tr
WFMydw6xr04PCQFMofsK14KkeD4eZqAAon2dyrnoZM1A5a6rVjfBSYLgVf8k+oIl
yZxlqHjKnKSnW985lIIrZPanFTk8aekXL2oMzQtr0xKjflcpeW6XJvm7fMIfv+dM
pyLlDQA6zfo+eQ8fgKJc9opx7MTmVACcP4Efzvj+YV3msLRVOqs5S2WE76CDhL5T
KV0AnVfSTYY1PQLfgwOmqSAyV2nCf96aUIYquHqMz/pt5p2WElxTMKuD5YYB7GoG
goDEz0dNJDER+65leUUtGCqYZg==
=n2Vt
-----END PGP SIGNATURE-----

There is one notable feature in this release - we
now support per-remote cookies, which can be used
for systems like Amazon CloudFront that can be configured
to require them for access.

Another interesting change is the static delta generation
process was tweaked to look for "similar" filenames, which
for example should ensure we get dracut's "reproducible"
initramfs in the delta.

That aside, it's mostly smaller bugfixes here, such
as memory leaks. Another good example of a bugfix
is pull: Don't do deltas with --commit-metadata-only.

Thanks to all contributors!

Alexander Larsson (1):
      Fix pruning of partial commits

Colin Walters (14):
      docs: Link to releng-scripts
      tests: Skip libarchive/selinux tests if in container without SELinux
      tree-wide: Remove unused variables detected by CLang
      otutil: Note that ot_log_structured takes a printf format
      parse-datetime: Use labs() for long input value
      deploy: Suppress unused variable warning for fscreatecon cleanup
      Define an initializer for GVariant{Builder,Dict}
      libglnx: Bump to master (for -fsanitize fixes)
      remote-refs: Add NULL terminator to options array
      ci: Use -fsanitize=undefined by default
      repo: Don't put remote refs in the summary file
      pull: Don't do deltas with --commit-metadata-only
      deltas: Only keep one file open at a time during compilation
      Release 2016.13

Giuseppe Scrivano (1):
      static-delta: find a similar filename using what is before '.' or '-'

Jonathan Lebon (3):
      .redhat-ci.yml: add clang
      delta: return valid enum member
      .redhat-ci.yml: use new build key

Simon McVittie (14):
      Force C.UTF-8 or C locale for tests
      Distribute test scripts even if we wouldn't run them
      Distribute valgrind suppressions in tarballs
      _ostree_kernel_args_replace_take: don't leak when replacing
      ot_admin_builtin_set_origin: don't leak options GVariant
      ostree_builtin_pull: consistently set free-function on refs_to_fetch
      ostree_admin_option_context_parse: explicitly clean up when exiting early
      ostree_sysroot_upgrader_finalize: free new_revision
      _ostree_sysroot_write_deployments_internal: stop leaking hash table
      keyfile_set_from_vardict: free the string array
      ostree_repo_pull_with_options: clear dirs array
      ot_remote_builtin_show_url: autofree context
      Fix some leaks of floating GVariants
      load_metadata_internal: don't leak GBytes

Sjoerd Simons (8):
      Filter bootloader supplied kernel cmdline options
      pull: Add per-remote cookie jar
      remote: Add command to list cookies
      remote: Add commands to add and remove cookies for a remote
      OsreeFetcher: Treat 403 as not found
      trivial-httpd: Add support for checking cookies
      tests: Add test for the cookie jar handling
      Update documentation for cookie handling commands

Git-EVTag-v0-SHA512: 905067d8a6ba66af636a7de20baa779b661a4e4df9b13fe95b1883c1db34b700b180e854af22866cd93e51d59a24b062cfbb1ce444342076eabcdf7d05900f67
-----BEGIN PGP SIGNATURE-----

iQEwBAABCgAaBQJYJLe3Exx3YWx0ZXJzQHZlcmJ1bS5vcmcACgkQ3EX9WSHBPwuN
tAf/dtJ5VhuQz31Pcbk0jQHuuL5V6UP/8Z2hlUNmqNFGKv228ciMGG4Vo68SDYRm
sCU6PPw/aKOQwzFMnqMTFNO6AhLdjc10iZz/TtaEQX5+cSYxTPSBVqQa8WvLLvyj
AuAZS7GcxDsis4XEho66wRGeDlyFA7ECIaXWs+jtGKwkHiA2tmxqibO7PIR1Zlr8
F8U5jjTtUSJYFic5HovjJab73PxjM92dLnPLGG2ttr5r9ezabzeJZJ45RkQWNGwh
BtQJh9mXM614yvwDxvjmv2/ShuWmqfXlC3jOiPI66JfN+D34XMW3cPuqOTgq16G9
hHZwQM9JPLm+NHloZb4IU1grFA==
=gV4o
-----END PGP SIGNATURE-----

Ths is a smaller point release that mostly brings in some pull API enhancements
for flatpak.

Two other notable changes:

• We now support proxies that require basic auth
• We create hardlinks to symlinks (do watch out for any regressions from this)

Alexander Larsson (5):
      pull: Support inherit-transaction
      pull: Support multiple specifications of --subpath
      Fix regression for symlinks in bare-user repos
      ostree_repo_read_commit_detached_metadata: Handle parent repo
      detached metadata: Put these in transaction

Colin Walters (2):
      core: Do create hardlinks to symlinks for checkouts
      Release 2016.12

Jonathan Lebon (5):
      docs: amend vmlinuz & initramfs naming convention
      ostree-sysroot-deploy.c: delete redundant check
      OstreeFetcher: provide proxy credentials if needed
      add .redhat-ci.yml and .redhat-ci.Dockerfile
      .redhat-ci.yml: use projectatomic/ostree-tester

Git-EVTag-v0-SHA512: 5eaafb1caf50a53e64d316ac624958b2878b849c65bbbc7aae4a2a90cf4053a3dcc134a8c4474185c12f6c9dce036acc00e2087c3027d230a5a7a6099a216e63
-----BEGIN PGP SIGNATURE-----

iQEwBAABCgAaBQJYCm+zExx3YWx0ZXJzQHZlcmJ1bS5vcmcACgkQ3EX9WSHBPwtn
vgf+K1Zf4tOjYOnxDGLaKp3Yf9Z+2lTvcYfOwffQq5BNu3SXVQ/Bf5Tg6O618V3W
oGKsu0m9wR8/nMqoVzdKyVjYVIdqq98TMpE3iYhPR0RbYYAcVe79/93F1Kg0tM3O
IbohVdJ1Sd4FRrlXM6IFfDKtxxg+AVZY8F+luQOTT6hMt15BgqJG6kXUGN2/tDLf
ghg9OoFBYHg6rCkjggTpeN70Alvj4fRuIWRjWMJ6s+Fj0oho6uhA46VBwzWiJWN/
qxfaQ22RsuQq5sW8QY3PdCeslinlVZyHiAFxxI3ep2hNDYN+8fs7/exhifebC8RO
gwXtxePAQr657tFifXofrEayYA==
=JXtm
-----END PGP SIGNATURE-----

Just a collection of smaller fixes. One thing I want to note
is that 2016.10 regressed things to flip fsync back on by default
for users of ostree_repo_checkout_at (notably rpm-ostree). This
is now fixed. We also continue dropping unecessary calls to fsync()
in favor of our global syncfs().

This release also fixes integration with
systemd-journal-flush.service, ensuring that systems configured for
persistent journal have it saved correctly.

Colin Walters (10):
pull: Do allow executing deltas when mirroring into bare{,-user}
sysroot: Port some small cleanup code to fd-relative
sysroot: Port origin writing code to fd-relative
sysroot: Drop an fsync for origin file when writing deployments
sysroot: Drop an unnecessary fsync
boot: Ensure we remount /var writable before systemd does journal flush
checkout: Fix fsync defaults for new API to be off for real
trivial-httpd: Port mostly to fd-relative
libglnx: Update to latest
Release 2016.11

Dan Nicholson (1):
admin: Allow running status unlocked

Jonathan Lebon (3):
static-delta: add some error handling
ostree_sysroot_init_osname: also create /var/log
docs: add mention of rpm-ostree package layering

Owen W. Taylor (2):
ostree-repo.c: Fix file descriptor cleanup
ostree_sysroot.c: Don't close sysroot_fd twice.

Simon McVittie (1):
Fix spelling of "repository"

First, there's some ongoing work in this release to support
systems without an initramfs, which is common in the classical embedded
space. Thanks to William Manley and Gatis Paeglis! I expect in the
future to do more work on improving ostree for the embedded case, such
as making more dependencies optional, and notably supporting libcurl.

In working on OCI/OSTree integration, we realized that some
APIs like checkout and archive import weren't introspectable. There's
a new checkout API that use booleans rather than bitfields, and the
previous one is deprected.

Thanks to Simon McVittie for improving the test suite, and extending
it to Debian on Travis.

This release is also notable for the completion of the port to "libglnx",
so OSTree no longer depends on libgsystem.

Besides that, this release is mostly bugfixes.

Thanks to all contributors!

Colin Walters (49):
tests: Fix karg tests on ostree-booted system
Revert "tests/libtest.sh: Print non-matching file on failure"
repo: Ensure we set mode for bare-user files before xattrs
builtins/commit: Switch to using ostree_repo_write_dfd_to_mtree()
build: Make symlink depend on source
docs/formats: Elaborate a bit on delta from NULL usage
repo: Fix leak with ostree_repo_commit_traverse_iter_init_commit()
pull: Don't execute static deltas when mirroring
trivial-httpd: Fix leak of option context
glib.supp: Suppress some dynamic type registrations too
pull-local: Explicitly unref variant rather than relying on floating
glib.supp: Suppress worker context -> thread bits
fetcher: Explicitly join thread if it's not self
glib.supp: Suppress g_task -> thread leaks
sysroot: Fix a leak in deployment dirpath API
deploy: Fix leaks in parsing /etc/os-release
lib: Fix leak in bootconfig parser
lib: Fix compiler warning from previous patch
tests/delta-crosscheck: Add missing --from
deltas: Handle untrusted checksums faster and more robustly
libglnx porting: Migrate to new tempfile code
repo: Make ostree_repo_create() nonfatal on existing repos
deploy: Replace a use of gs_file_enumerator with compat wrapper
repo: Port sign_data() to libglnx tmpfile APIs
repo: Port to g_autoptr() rather than old style cleanup macros
lib: Port away from gs_file_rename()
grub2: Port away from gs_file_sync_data()
deltas: Port compilation to libglnx/fd-relative
repo: Flip the fsync default to off for new checkout API
lib: Add padding booleans to OstreeRepoCheckoutAtOptions
Update libglnx for O_TMPFILE build time option
lib: Use libglnx file replace API more consistently
lib: Fix a compiler warning introduced from earlier patch
repo: Port metadata writing code to fd-relative
lib: Drop GFiles for self->{objects_dir,state_dir}
repo: Drop internal GFile config_file
.travis.yml: Delete, we aren't using it right now
repo: Drop more internally unused GFile members
build: Import attributes.m4, detect CFLAGS at build time
build: Make -Werror=int-conversion fatal
repo: Fix an uninitialized variable
deploy: Port file copying code to GLnxDirFdIterator
deploy: Use internal recursive copy rather than libgsystem
build: Update .gitignore
prune: Retain the tip of each ref even with date pruning
Final excision of libgsystem dependency
travis: Disable email notifications
tests: Port sysroot.js away from libgsystem
Release 2016.8

Dan Nicholson (5):
repo: Fix annotation for ostree_repo_add_gpg_signature_summary
lib: Fix version script node ordering
core: Add allocating b64 checksum functions
deltas: Allow processing of empty delta parts
tests: Add test for delta with empty parts

Giuseppe Scrivano (5):
Makefile-tests.am: make check uses the built binaries
libostree: new function ostree_repo_checkout_at
libostree: mark ostree_repo_checkout_tree_at as deprecated
libostree: skip introspection for two functions
libostree, ostree: fix usage of ostree_repo_checkout_tree_at

Jonathan Lebon (3):
libglnx: bump to latest
static-delta: fix command contexts
static-delta: remove unused struct

Matthew Leeds (1):
README: Fix broken link Closes: #397 Approved by: cgwalters

Simon McVittie (3):
Update libglnx: Add missing files to libglnx distribution
Skip tests that use whiteouts under Docker/aufs
travis: run the test suite on various distributions

William Manley (10):
tests: Add basic tests for ostree-prepare-root
ostree-prepare-root: Refactor code to resolve deploy_path
ostree-prepare-root as init: exec init from deployment if run as PID1
ostree-prepare-root: Cope with /proc not being mounted
ostree-prepare-root: Refactor: Create /sysroot.tmp much later
Refactor ostree-prepare-root: Perform chdir to deploy directory earlier
ostree-prepare-root: Use pivot_root if real sysroot is already mounted at /
ostree-prepare-root: Make error message capitalisation consistent
ostree-prepare-root: Fix typo in error message
ostree-prepare-root: Add test that overlayfs over /usr works.

Git-EVTag-v0-SHA512: f819c064f27c2fc62ca80ad7448c6ab59ef5425542dd5e43d4e89152cf1bf92075d00ee2ce7dc4c7b853bad48a893b20c4cb6cd9b6936c100ca864ab8b51aba7

This release is almost entirely bugfixes. Most notable is a fix for a
relatively rare race condition in the pull code on cleanup (after
completion), and also a memory leak.

Besides that, there are improvements for the test suite, some more
porting away from libgsystem, a bugfix for static deltas important to
flatpak, build tweaks for older glib, etc.

Thanks to all contributors!

Alexander Larsson (2):
      pull: Correctly handle repo->parent_repo when applying static deltas
      tests: Test partial commits for local remotes

Bastien Nocera (1):
      libostree: Fix build failure with glib 2.42

Colin Walters (17):
      libostree.sym: Fix test-symbols
      libglnx porting: Use of GSDirFdIterator
      lib: Use sd_journal directly (optionally)
      lib: Use g_file_enumerator_iterate() if available, with fallback
      libglnx porting: Drop uses of gs_file_openat_noatime
      pull: Write commitpartial files for local imports too
      build-sys: Make libostree-1.so depend on the symbol file
      rofiles-fuse: Do allow fchmod/fchown on directories
      checkout: Add an option to require hardlinks
      delta: Add --if-not-exists option
      docs: Add a section on Docker
      tests/libtest.sh: Print non-matching file on failure
      tests: Add some test coverage of repeated pulls w/HTTP 500s
      fetcher: Hold a ref to main context for lifetime of thread
      fetcher: Clear all data for session in session thread
      fetcher: Remove unused GTask structure member
      Release 2016.7

Dan Nicholson (6):
      tests: Remove gpg verification files from EXTRA_DIST
      tests: Ensure mutable deployments from libostreetest
      build: Distribute libglnx and bsdiff Makefile templates
      tests: Remove extra $CMD_PREFIX from test-auto-summary.sh
      tests: Improve check for /proc/cmdline kargs
      build: Override systemd unit directory for distcheck

Jonathan Lebon (2):
      ostree admin switch: fix short summary
      static-delta-core.c: squash unused var warning

Krzesimir Nowak (1):
      core: Fix wrong return value docs

Mathnerd314 (5):
      core: Use OSTREE_SHA256_STRING_LEN instead of 64
      configure: Turn on -Wempty-body
      core: Add OSTREE_OBJECT_TYPE_COMMIT_META
      refs: Fix a logic error
      pull: Free fetch_data by default

Simon McVittie (3):
      entry_pathname_test_helper: these tests need extended attributes
      tests: use our own generated libtool, not the one in $PATH
      tests: fail the build if symlinking tests/ostree fails

Yu Qi Zhang (2):
      refs: allow overwrite of empty folders
      refs: resolve conflict between local/remote repos

Git-EVTag-v0-SHA512: 782bd89c873f94081a7ec1bd8d1d802738960e48580a1ca6dbe00d86e7700fb7d36e86148100d30d7523c19a836b3abe7a8495327e238942817ec5700c165a64
-----BEGIN PGP SIGNATURE-----

iQEcBAABCgAGBQJXgAYTAAoJENxF/VkhwT8L2J4H/AtKy2cJ8fzVmhwAhpL8+M4A
g6ayVp1xMj46tj1e3ifzfYmtonjdqoDUsTyVfcwT0ZTfSc83URL2IRUhyfYu6778
9/jvULJrIG7KDSuG0IJg4BZGg+LhsNMpzgy17rzMM4+fWhppXJTGETHBsvNnaNtp
z1agBRgT4mBMAD1HYQJNjlngCYsXyBFP3WGiC72wOyMff+HlDmaELbuKMZBvj0Fu
G9UQ5H2V0JeRBkCsf6npfBI0zHVefx02x0DvOVXXXXWQXqAdAD9x4NyelWiq7fYE
uldvo/P4QjNdKllbWfjV/UwclDajcjIkrSl2HIwfTLER3LLKIXwb6YqP0LKO4I4=
=+m3G
-----END PGP SIGNATURE-----

Release 2016.6

There's quite a lot of changes in this release since 2016.5, but one
thing I want to call out explicitly is that we fixed a race condition
in the HTTP pull code that could cause hangs or crashes that mostly
occurred only when doing "large" pulls (thousands of object requests).
If this occurs, client systems can work around it by cancelling and
retrying the pull.

Other high level changes:

Jonathan Lebon:
ostree-repo-libarchive.c: major refactor

This laid more groundwork for rpm-ostree to import RPM (CPIO) archives
sanely. If you are integrating with an existing package management
format, this should help a lot.

Mathnerd314 (11):
repo: use OSTREE_TIMESTAMP (=1) for checked-out files

Is a quite interesting change - we previously used a timestamp of
zero, but Nix has apparently done better with 1 for various reasons.
This is a pretty subtle change, so be on the lookout for regressions.

Thanks to all contributors!

Alexander Larsson (13):
ostree export: Add --subpath support
ostree export: Add --prefix option
repo: Allow loading files staged in the transaction
repo: Fix temporary directory allocation
repo: Handle parent repos with different remote configuration
tests: Fix build with old glib
Build on older versions of glib
libotutil: Fix leak of VariantMapData
pull: Fix leak of debug temporary strings
pull: Fix leak of FetchObjectData in some cases
pull: Fix leaked uri in request_static_delta_superblock_sync
pull: Fix leak of refs_to_fetch
tests: Exit valgrind tests if a leak is detected

Colin Walters (50):
core: Remove ostree_checksum_update_meta that was not implemented
lib: Remove ostree_repo_file_make_empty_tree
Rename test-abi to test-symbols, start verifying symbols are documented
libtest: Skip FUSE if CAP_SYS_ADMIN not in bounding set
repo: Simplify internal has_object() lookup code
deploy: Start hardlinking kernel/initramfs on single-part again
build: Introduce --with-dracut=yesbutnoconf
libglnx porting: Migrate from GSConsole
repo: Fix reading repos on read-only media
repo: Add OSTREE_REPO_TEST_ERROR=pre-commit env var
repo: Add OSTREE_BOOTID override envvar for debugging
repo: Clean up staging directory for previous boot IDs
repo: Make repo/tmp expiry configurable via tmp-expiry-seconds
lib: Add more filename validations (no ., .. or /) in commit logic
libglnx porting: Migrate to glnx_stream_fstat()
build: Use --std=gnu99
trivial-httpd: Add attribute((format))
Make enum generation private by default, export stub symbol
build: Don't run glib-mkenums if there's nothing to do
README: x/xdg-app/flatpak/
libglnx porting: Port "load utf8 file" contents API callers
repo: Port uncompressed cache GC to libglnx
libglnx porting: Port callers of gs_file_unlink to just unlink()
libglnx porting: Port away from gs_file_ensure_directory()
sysroot: Correct error handling path in previous libglnx port
core: Port to new libglnx tempname API
lib: Change ot_util_variant_map helpers to consistently sink refs
lib: Drop GFile variant mapping API for fd-relative
libglnx porting: Port away from gs_file_map_noatime()
glnx porting: Port away from gs_file_get_basename_cached()
tests: Use strict mode by default for C tests
tests/test-pull-c: New test that runs through the pull API via C
glnx porting: Drop last uses of gs_file_get_basename_cached()
libglnx porting: Drop last use of gs_transfer_out_value()
glnx porting: Drop use of gs_file_openat_noatime
lib: Add _ALLOW_NOENT flag to internal variant mapping API
lib: Add a helper for mmap->bytes with openat(), use it in repo
repo: (minor) Drop a GFile usage in signature creation
lib: Fix a leak in remote parsing
lib: Add OSTREE_SUPPRESS_SYNCFS environment variable
tests: Modernize valgrind infrastructure
lib: Port some manual close() cleanups to be glnx_fd_close
manual: Link to mender.io
Add "archive" as an alias for "archive-z2"
repo: Avoid a possible divide by zero in progress
manual: Discuss mirroring
build: Fix libreaddir-rand to honor global CFLAGS
tests: Support OT_SKIP_READDIR_RAND
pull: Ensure we always process queue only from main thread
Release 2016.6

Gatis Paeglis (3):
Remove unused variables from install_deployment_kernel
Fix --enable_rofiles_fuse=no build
Fix build when have_libsoup_client_certs=no

Giuseppe Scrivano (1):
man: add missing options for commit

Jonathan Lebon (7):
ostree-repo-libarchive.c: major refactor
ot-builtin-commit.c: add --skip-list option
tests/test-libarchive.sh: add more test
tests/test-libarchive-import.c: add tests
OstreeRepo: add extensions directory
ostree_repo_write_commit: add missing docstring arg
configure.ac: properly check for bison

Krzesimir Nowak (26):
lib: Fix a typo
trivial-httpd: Remove useless code
lib: Fix an introspection annotation
tests, lib: Remove unused variables
lib: Add URL override pull option
pull: Add a --url option
trivial-httpd: Add a --log-file option
tests: Add a test for ostree pull --url
sysroot: Plug some leaks
core: Improve variant format docs
repo: Plug a leak
repo: Allow using options for fetching summary
libostree: Variant-related leak plugs and fixes
libostree: Fix bracket-missing warnings
libostree: Add g_autoptr() support for the public types
build: Remind about bumping related versions
build: Allow ostree to use g_autoptr on its types internally
build: Install new autocleanups header
libotutil: Plug a leak
core: Add a function creating an archive-z2 content stream
repo: Factor out the check of gpg result to a separate function
repo: Add a missing Returns paragraph
repo: Factor out setting up a GPG verifier
repo: Add functions for verifying any data in repository
summary: Fix a typo
repo: Fix build on 32-bit systems

Mathnerd314 (11):
commit: accept NULL subject argument
commit: Add --editor / -e command line argument
commit: Display subject/body in commit editor
commit: Don't require a subject
log: Display "(no subject)" for commits without a subject
commit: Update manpage to reflect --editor
repo: use OSTREE_TIMESTAMP (=1) for checked-out files
pull: Move libsoup-related code from ostree-repo.c to ostree-repo-pull.c
pull: Move pull and pull_onedir back into ostree-repo.c
docs: Get API docs working again
related-projects: Update with more information and projects

Micah Abbott (1):
docs: fix swapped link syntax

Sam Spilsbury (2):
Makefile: Move to AM_DISTCHECK_CONFIGURE_FLAGS
repo: Display estimated time remaining when pulling

Simon McVittie (12):
libtest: show files' contents when assertions about them fail
test-parent: this test requires user xattrs
test-sysroot.js: set "strict mode" when sourcing libtest.sh
Link libreaddir-rand to libdl
autogen.sh: rely on VPATH for submodules' Makefile-*.am.inc
build: distribute libostree.sym in tarballs
build: distribute test scripts in tarballs
build: distribute TAP helper scripts in tarballs
build: distribute more test files
libtest: make gpghome in tmpdir writeable
libostreetest: include libtest.sh from srcdir, not builddir
build: re-create tests/ostree-symlink-stamp if Makefile changes

Yu Qi Zhang (2):
refs: add "ostree refs --create" and unit tests
libglnx porting: delete temp files on failure of file creation

Git-EVTag-v0-SHA512: 216ec7ea61eeabb0404207b01387b7de85276b2fbf09e39928f4800eddac06904d690dbf66260282a1cc4127f15a68feb0a8da31921d7d943856569cb81b1d6f