Operating system and container binary deployment and upgrades
OTHER License
Bot releases are visible (Hide)
Published by cgwalters over 7 years ago
One of the most notable changes in this release is that we switched
to using a systemd generator for handling /var
, which means admins
can now set it up as an explicit mount point. We feel pretty confident
in the code, but do test your specific setup. One note in particular;
the new model (obviously) requires systemd, and while we tried to preserve
the non-systemd path, it wasn't explicitly tested.
Issue: https://github.com/ostreedev/ostree/issues/855
The work to port to a new code style continues rapidly; at this point
most of the library is converted, with just the command line remaining.
I think the new style is a lot more readable now that we rely fully
on __attribute__((cleanup))
.
Philip Withnall contributed changes to enhance the OstreeAsyncProgress
reporting API, which I think is going to be quite useful for user
interface frontends (like GNOME Software).
PR: https://github.com/ostreedev/ostree/pull/819
There's a smattering of smaller bugfixes; minor memory leaks, double close()
and the like. In this cycle we also beefed up our CI/testing more - we
now test both Fedora Atomic Host and flatpak more explicitly. Contributions
to extend the suite to other distributions would be appreciated; for example,
tests for ostree-as-host on Debian. Our Travis-executed tests
should be extensible.
Thanks to Dan Nicholson for also fixing some of the test suite for installed
tests, and also contributing introspection fixes for language bindings.
Another feature that involved a lot of internal changes is our handling
for /etc
on SELinux-based systems. We now label files as we go rather
than having a more fragile separate relabeling path. This is also
exposed as an API, which is used by rpm-ostree
now. I think this
particular change highlights the strength of "libostree" as an API
that can be reused by higher level systems.
PR: https://github.com/ostreedev/ostree/pull/797
Thanks to all contributors!
Colin Walters (62):
pull: Support deltas for explicit commits
checkout: Fix bare-user symlink checkouts
Bump release for 2017.5
lib/boot: Convert bootconfig parser to new code style
sysroot: Continue conversion of some simpler functions to new style
cmdline: Start conversion to new code style
repo: Optimize bare-user content object reads a bit
repo/checkout: Finish conversion to new code style
lib/cleanup: Port some of the cleanup code to fd-relative and new style
repo: Add a "force copy" flag to checkout
lib/core: Complete conversion to new code style
Rename "osname" → "stateroot"
lib/util: Delete some leftover pre-libglnx directory opening functions
repo: Drop unused cache variables leftover from pack files
repo/checkout: Cache lookups of dirmeta objects
checkout: Merge union/add logic for copies during checkout
tests: Factor out a libtest-core.sh
tests/installed: New installed, privileged tests using Fedora AH
checkout: Add SELinux labeling for checkout, use in deploy
repo: Port object listing func to use libglnx more + new style
repo: More porting to new style
repo: Fix incorrect use of errno() error throwing
lib/sepolicy: Convert to new code style
sepolicy: Cache the value of is_selinux_enabled() to work around bug
lib/checkout: Use TEMP_FAILURE_RETRY()
ci: Add a context for testing flatpak
ci: Fix flatpak test pkg install
checkout: Dedup calls to memcache ref
repo: Delete the last use of GFile tmp_dir
tree-wide: Convert to using autoptr(GString) vs g_string_free(...,TRUE)
Add --enable-installed-tests=exclusive, fix installed case
utils/checksum: Port to new code style
fsck: Check for refs missing corresponding commit
tests: For installed, s/test-/itest-/ to avoid in-tree name clashes
tests: Migrate test-pull-many.sh to installed on FAH
ci: Extend FAH rootfs for installed tests
ci: More flatpak ci fixes
ci: Move travis scripts from tests/ → ci/
diff: Port some to new code style
sysroot: More porting to new code style
checkout/commit: Use glnx_regfile_copy_bytes() if possible
lib/prune: Complete porting to new code style
lib/checkout: Move special case for subpath of file to toplevel
lib/checkout: Optimize checkout by avoiding OstreeRepoFile recusion
repo: Fix double close() in summary generation
lib/repo: Port more of GPG and summary functions to new code style
checkout: Plug a memleak of the state stringbuf
tree-wide: Switch tabs ⭾ in various files over to spaces ␠
lib/checkout: Fix regression in subpath for regular files
remount: Drop support for auto-tmpfs-on-var; use systemd.volatile=state
lib/remote: Box OstreeRemote if experimental-api
lib/repo: Fix double close()
switchroot/remount: Trim set of remounted filesystems
switchroot/remount: Check mount status before remounting, be verbose
Switch to using a systemd generator for /var
tree-wide: Add a few missing O_CLOEXEC
lib: Add "open dfd iter handling noent" helper, port tree-wide
lib/upgrader: Port to new code style
build: Use cd $(srcdir) instead of `git -C`
switchroot/generator: Add var.mount to local-fs.target.requires
lib/pull: Port some functions to new code style
Release 2017.6
Dan Nicholson (5):
pull: Fix crash specifying override URL in summary fetch
commit: Mark ostree_repo_transaction_set_ref* checksums nullable
pull: Allow additional HTTP headers for summary fetch
tests: Install libtest-core.sh with installed tests
tests: Look for trivial-httpd in $libexecdir
Francesco Giannelli (1):
switchroot: Document a bit more, add demo shell implementation
Jonathan Lebon (2):
tests/ci-commitmessage-submodules.sh: fix for RHCI
libglnx: bump and use new helper methods
Krzesimir Nowak (1):
apidoc: Add missing enums to sections file
Philip Withnall (22):
ostree: Use G_OPTION_ARG_FILENAME where appropriate
tests: Ignore some standard automake check output files
libostree: Rework OstreeAsyncProgress to use GVariants internally
libostree: Add multiple getter/setter support to OstreeAsyncProgress
src: Port to new OstreeAsyncProgress atomic API
libostree: Allow OstreeAsyncProgress:status to be set atomically
libostree: Get and set OstreeAsyncProgress:status atomically
libostree: Fix a typo in docs for ostree_repo_pull_with_options()
libostree: Add missing checks for invalid timestamps
libostree: Fix potential use of uninitialised memory in progress API
libostree: Ensure progress keys are all always set
libostree: Add some additional metadata to the summary file
libostree: Document endianness of GVariant metadata types
ostree: Add --view mode to `ostree summary`
ostree: Improve formatting for well-known summary metadata keys
ostree: Use #defines for well-known metadata key names
tests: Add a test for `ostree summary --view`
tests: Fix regex escaping in test-summary-view.sh
build: Add --enable-experimental-api configure option for unstable APIs
libostree: Expose $OSTREE_FEATURES in the pkg-config file
libostree: Make OstreeRemote a public and internal API
build: Add -C arguments to some git invocations
Sjoerd Simons (1):
repo/commit: Fix memory leak
Git-EVTag-v0-SHA512: 47a502039ce8abaa83e5872560846d592fc5e38557a190c3b1101f7ea245a3eeee21be8b9aa39c1ab163dc30072d7ef495b26ba18388d4216421b73e3dfd9372
-----BEGIN PGP SIGNATURE-----
iQEwBAABCgAaBQJZHMGOExx3YWx0ZXJzQHZlcmJ1bS5vcmcACgkQ3EX9WSHBPwt9
LQf/Vu7fVSmtfrlQV6j+uaWeg2sEcYjValgk517aksWBaMlacGbvlYf8N6PESYPv
RcXbv4uNAvHOLKck5yU8iT633f3QpW2gei/IvqIYrV25ePJGhODRs7qGwjkKVVy8
BjEf80AcX/0HT6HGyX0CYLsVJJ8Hg6QSM3dzSMBaqMeWx1HnAK/2pWFQAssUfqRh
6UWWjZfCzW809RqY2efy7nJXDfHDoB4sEFDM8CGs12kQ4tcPJqp6kjMHcuXfC8v9
XZh48yfHb/6o3En4ZTd8cUR7nB5nItnFp+AwXOje7VQa8o2vyiUWvZ8InVJj6/Fx
wZfYgbOcDCfqp++WzsZNhaajBg==
=+xRv
-----END PGP SIGNATURE-----
Published by cgwalters over 7 years ago
This is a bugfix release for 2017.4 to fix a regression
that broke flatpak: #798
Colin Walters (2):
checkout: Fix bare-user symlink checkouts
Release 2017.5
Published by cgwalters over 7 years ago
A notable new feature in this release is a fourth repository
mode: "bare-user-only". This is very similar to bare-user
, but
canonicalizes permissions and ignores xattrs. The intended
use of this is for "non-OS" container tools such as flatpak, where one
intentionally discards the traditional file ownership.
(I'm calling this container case "non-OS" to distinguish from other container tools
where one might want to "log in" via PAM and supporting distinct UIDs
inside a single container is valuable)
More information: https://github.com/ostreedev/ostree/pull/750
We have a few new APIs, such as ostree_check_version()
which is
important when making use of some of the "API extensions" we have
using GVariant
on e.g. ostree_repo_pull_with_options()
.
The diff is a bit larger due to us switching to a new code style.
Another quite important change is that ostree trivial-httpd
is
disabled by default. With a libcurl build, this is the last part
that links to libsoup. It's only needed for unit tests, so can
be subpackaged or discarded. (We're doing the latter for Fedora)
Speaking of curl, we now support --with-openssl
which enables
using OpenSSL's libcrypto
for SHA256. This can be notably faster.
You likely want this if e.g. libcurl
is already linked to OpenSSL
for you. I'm increasingly confident in the curl code, and should
be ready to recommend using it by default in the next release or
two.
Thanks to all contributors!
Alexander Larsson (4):
Add _ostree_repo_mode_is_bare helper
Add bare-user-only repo mode
commit: Add --canonical-permissions argument
Add basic tests for bare-user-only repo modes
André Klitzing (2):
Avoid unnecessary includes
Fix includes if built against musl
Anton Gerasimov (1):
Define TARGET_PREFIX to use with grub2 deployment
Colin Walters (46):
Disable "ostree trivial-httpd" by default now
core: Add runtime ostree_check_version()
builtin/show: Convert to direct return/decl-after-stmt style
pull: Squash a `-Wmaybe-uninitialized` warning
lib: Exclude soup header from introspection
lib: Squash most of the gtk-doc warnings for missing parameters
lib: Add a private copy of checksum-instream
core: Support building with OpenSSL for checksums
sysroot/deploy: Some cleanup to decl-after-stmt/return FALSE style
sysroot: Prep refactoring of cleanup logic
build: Quiet automake warning for bupsplit
build: Various fixes for openssl build
Bump libglnx, port a few callers to new error API
sepolicy: Add ostree_sepolicy_new_at()
sepolicy: Add better private API for setfscreatecon
cfg.mk: Add a syntax check for a redundant : in glnx_throw
repo/refs: Convert to new code style
sysroot: Add ostree_sysroot_write_deployments_with_options()
core: Convert some functions to new code style
build: Dist ostree-sepolicy-private.h
commit: Prefix error with target object name on failure to write
repo+tests: Add [core]disable-xattrs=true, use it on overlayfs
pull: Also skip partial commits for deltas if no summary file
ci: Enable -Werror=unused-result with -Wp,-D_FORTIFY_SOURCE=2
sysroot: Don't cache sepolicy
repo/commit: Change most of this file to new code style
build: Expose autocleanups unconditionally, start using them
lib: Fix OSTREE_CHECK_VERSION()
lib: Delete old GFile path helpers, and migrate single last user
lib: Delete old unused GFile helpers
libutil: Delete unused threadpool wrapper
libutil: Delete unused GVariant I/O functions
libutil: Delete some unused checksum helper API
libutil: Delete some unused error handling APIs
Add Coccinelle usage: one for blacklisting, one for patch collection
sepolicy: Fix regressions from introduction of sepolicy_new_at()
Add flag to make SELinux label failure fatal, add hack for /proc
ci: Add a check that submodule changes include "Update submodule: "
core: Fix default value of disable_xattrs
repo/core: Convert some functions to new code style
soup: Hold a ref to the pending URI during completion processing
sysroot/deploy: More code style conversion
curl: Enable pipelining for HTTP/2
Fix a few gtk-doc warnings
checkout: Provide useful error with checkout -H and incompat mode
Release 2017.4
Daniel J Walsh (1):
sysroot/unlock: Ensure overlay label on /usr is `usr_t`
Erik Larsson (1):
diff: Add ostree_diff_dirs_with_options(), expose via cmdline
Georges Basile Stavracas Neto (1):
libostree: add versioning macros
Git-EVTag-v0-SHA512: 71f0649308f04f15eb6a22b4b34c2804d680d5870dd3b6391079fa2be6c0f4df74e7ed4f8abbb461104ad23707ecf38587b187a8bd240a9979e4800c13efce78
-----BEGIN PGP SIGNATURE-----
iQEwBAABCgAaBQJY7npbExx3YWx0ZXJzQHZlcmJ1bS5vcmcACgkQ3EX9WSHBPwuu
tAf+OodLq6R8wuDDJUwOHTHTPlaCW5fZn/MEm3IIpeX7A3Cnr3+t6ZgY4LBtc22Q
w3eHCoHMC181Xr6Rz3RtncRXtMJyvQjanLXDdTCJomkNEi4e4YngMLO1wqQ/5gY+
Dcgo8/u4n5lM9ns5rSxDZ3U+kSkkfVWwkTbDlBYpn5hnrW27k/OSbN4uXqCccjTE
LMRuniUqFaNSy1ia2Sr//6znpoYlaFfL30VEL9GJlvkxsg8c0ToCwnuzcvMP1mM4
SY3noj1LqZ+nVtBTRWDdpY666CdgzPm30OxssVL8fdtXN1MBIWQVBsNmkAvRhFjJ
sRaWwbjxsdQ0TXOmZuaJj3WQrQ==
=iIP/
-----END PGP SIGNATURE-----
Published by cgwalters over 7 years ago
A variety of small fixes here. One of the most notable things is
the static delta progress computation is now more accurate; this should
make it easier to write a user interface consuming libostree that displays
how much will be downloaded before initiating it.
Related to this, ostree admin upgrade
gained --pull-only
and --deploy-only
which makes it easier to write e.g. a systemd timer unit that does background
pulls, but only do a deployment (i.e. upgrade) on administrator/device owner
action. A bit more information in https://github.com/ostreedev/ostree/pull/642
and https://github.com/ostreedev/ostree/issues/640
There are two API additions - it's now possible to configure the progress UI frequency
and the zlib compression level.
Besides that, there are a variety of smaller fixes. My favorite is probably
a small fix for grub2 on ppc64,
so we now have fedora/26/ppc64le/atomic-host
.
Thanks to all contributors!
Christian Hergert (1):
repo/checkout: fix 32-bit builds
Colin Walters (28):
deltas: Don't put unreadable *from* objects in fallback
delta-show: Don't dump whole superblock, do show fallback checksums
repo: Fix static delta progress display
pull: Explicitly error out if metadata objects are fallbacks
pull: Fold together deltapart+fallback count for display
ci: Install PyYAML
lib: Ensure an error is set in ensure_unlinked() if errno != ENOENT
libtest: Re-enable quiet mode for building fs tree
README.md: Add more/clean up links to consuming projects
libglnx: Re-bump to master due to accidental reversion
ci: Hard error on all -fsanitize=undefined warnings
build: Add --with-smack, use it to reset contexts for writing objects
main: Make ostree --version output YAML (and add gitrev)
deploy: Correctly use libmount unref() calls rather than free()
man/repo-config: Document mirrorlist
tree-wide: Squash noncritical compiler warnings
deploy/libmount: Fix build with old util-linux 2.23 (CentOS7)
fetcher: Log failures into journal
upgrade: Add support for --pull-only and --deploy-only
grub2: Use g_spawn_sync() rather than GSubprocess to avoid SIGCHLD
grub2: Use "linux16" only on x86/x86_64
pull: Use all available commits for delta sources
fetcher/curl: Fix leaks caught by ASAN
Allow and start using C99 declaration-after-statement
repo/checkout: Verify early if src/destination are on same device
checkout: Support a "pure addition" mode
repo/checkout: Convert a few functions to new "stmt-decl/FALSE" style
Release 2017.3
Gatis Paeglis (1):
deltas: Expose the filename parameter
Georges Basile Stavracas Neto (2):
repo-pull: add option to set the async update frequency
ostree: allow setting update frequency from command line
Giuseppe Scrivano (1):
contrib/golang: rm directory
Jonathan Lebon (2):
pull: don't use static deltas if archive repo
libglnx: bump for -Wmaybe-uninitialized fix
Philip Withnall (2):
build: Fix disabling --enable-man if xsltproc is not available
libostree: Allow compression level to be set for archive-z2 stream
Git-EVTag-v0-SHA512: 55adebf589a0f2115f0ab3cb3f69b42ba3a08c19b3bf54580c437ac08e336651d54849666ab5718e466bdc99bbbaedca79f91619d6e5db3a0f15849029d33cfe
-----BEGIN PGP SIGNATURE-----
iQEwBAABCgAaBQJYwa5GExx3YWx0ZXJzQHZlcmJ1bS5vcmcACgkQ3EX9WSHBPwvT
ywf/dTxmhHzODOw1cCx+OIb7kNf5THsxfz58RR+mhglzt26pNcoo+qKmSbRafHLi
n7+lt5U3VxucqLqPnxbEgj/1r6LzKZ5ZKyqXivsouSLv/leBm/cIeR1s/6JxL8N1
CHc6v9/AG7U4W9USYhy/PSf8PM1M0RbyeCXRi+tfvIfQRDyVo8JY3VBXxbm9YX3T
rY0GT35yHbbY9J+nMhJvi5jqKuiGa86OvT+pYmOUXIfaD54wmjLwoGGDyXh7Zhnb
rhLCNMe8hXM5PTWoidYloczTkwcw2HiKxS0olb1+hHTekSdOEsS86SxMst9JLXu3
0eTaFMNlKKf26LKYliV4jUI0mA==
=8CIL
-----END PGP SIGNATURE-----
Published by cgwalters over 7 years ago
First, this release renames the project to libostree
. This best matches
the current usage of the code, where different projects act as client tools.
More information in the pull request.
However - if you're a user of ostree admin upgrade
; don't worry, it will
continue to be maintained and there are improvements in the pipeline.
It's possible that there will be an effort to have a "canonical" ostree
client-side daemon in the future.
Moving on, there are some smaller bugfixes and enhancements in this release,
and two big new build-time options.
--with-curl
: We now support libcurl as a HTTP backend. This passes all of the
existing tests, and is suitable for evaluation by downstream consumers. Please
give it a try, and it's likely we'll classify it as equally stable as the
libsoup backend within a release or two. Among other features, the libcurl
backend can speak HTTP/2
, which can result in substantial speedups in the
non-static-delta case. Another motivation for this is that for rpm-ostree
we
already depend on libcurl, which also links to OpenSSL in Fedora. Whereas
libsoup->glib-networking->gnutls
, so with this change we'll drop gnutls too.
PR: https://github.com/ostreedev/ostree/pull/641
--enable-rust
: This is an experiment in following a similar plan to what Firefox is doing with
Rust. When this build time option is enabled, a very small bit of libostree (the
rsync-style rollsum code) is in Rust, and linked statically into the rest of the
library. There are no plans right now to make this a hard requirement in the
near future. Please let us know if a dependency on Rust would be
a blocker for your usage of libostree. Or conversely, if using Rust is exciting
for you and would make you more likely to contribute, please also let us know that!
There's more information in the pull request.
Thanks to all contributors!
Alexander Larsson (1):
rofiles-fuse: Support write/read_buf()
Anton Gerasimov (1):
admin-switch: Don't segfault if there's no remote
Chen Fan (1):
doc: fix typo in CONTRIBUTING
Colin Walters (19):
lib: Adjust comments in symbols section for last release
lib: Prefix GPG errors with the checksum
travis: Disable tests (but keep builds) on flaky distros
lib: Move the bupsplit selftest into our test framework
tests: Add setup for more realistic repo, change pull-many to use
Rename to libOSTree
oxidation: Add implementation of bupsplit in Rust
packaging/: Delete
lib: Add ostree_repo_reload_config()
rust: Support `make dist` -> cargo vendor
repo: Add archive/zlib-level option, drop default compression to 6
pull: Add queuing into the higher level logic
fetcher: Drop the libsoup queue
pull: Show Estimating if we're scanning too
libcurl backend
libglnx: Bump
commit: Support -F/--body-file, like git
build: Remove .PHONY for Rust shared library
Release 2017.2
Jonathan Lebon (4):
trivial-httpd: trivial option help string fixes
docs: update pulp_ostree link
trusted.gpg.d: keep in the same location
fetcher queue: also throttle on outstanding writes
Krisztian Litkey (1):
libostree: added empty ot_cleanup_{read,write}_archive macros.
Philip Withnall (1):
ostree-repo: Clarify error behaviour of remote option getters
Simon McVittie (1):
libostree: Don't distribute generated enumtypes in tarballs
Git-EVTag-v0-SHA512: 1191007c2417ecaae5eded9453e830f1e91532360d44a9d4e9a845ab62491863e0ad1a20437d476172d6867a4b0548ca89ad5715b802c2a9e0f6d53f62f812a8
-----BEGIN PGP SIGNATURE-----
iQEwBAABCgAaBQJYo0urExx3YWx0ZXJzQHZlcmJ1bS5vcmcACgkQ3EX9WSHBPwsi
xQgAgqh6Ncfdalon2ib1RHYzVEl4lqGz+cVRZGCZAl7bdwx8HbAfbS2lGnrSG6RA
o97/Q9rtOfnMjsjFWQpwxt56DXu7s/ULthGOjw7y0f5gp8e2sPcbnbQdOxI9wnyU
v1JjiKD8QmO5u1Dj6rLIMi5WmQFAEsU6TPUcJw95KBHc4e0n9MVfy3gJZV/MO51Y
uT6qAa4MNl3O9Inos4JOqLDYnSLHkLquVqGvebOuRiJfhIcH9BLPsXGe5CWwUTe3
1KVN5lGD0wnBawCnsZiJw7iVG5Nb3lHEz3qIyfVZH2b+eq3gqt+EpXCOia7WeUz8
qfl84nExhadLEhbrGLtl+QpeRw==
=8xvm
-----END PGP SIGNATURE-----
Published by cgwalters over 7 years ago
This release has mostly bugfixes, the main new feature is that the prune
command gained more sophistication around selectively pruning branches. We're
planning to use this in Project Atomic work where we want to co-locate both
"development" and "stable" branches in the same repository.
The next release is likely to be more exciting, as we have an additional new
libcurl backend in the works - this release contains some preparatory cleanup
for that.
Thanks to all contributors!
Colin Walters (19):
docs: Fix ostree.version -> version
fetcher: Hoist core "mirrored request" API to public
fetcher: Move high level functions into "fetcher-util"
fetcher: Split lowlevel API into file/membuf variants
build-sys: Minor makefile tweaks
Split trivial-httpd into separate binary
pull: Rework delta superblock fetches to be async
trivial-httpd: Daemonize better
.dir-locals.el: Standard Emacs indentation config
unlock: Fix description for --hotfix
tests: Alias assert_not_reached() -> fatal()
pull: Fix theoretical checksum collision for metadata fetches
fetcher: Rework API to use strings for tls keys/db
tests: Don't inject newline in URL
tests: Loosen error regexp
libtest: Enable web server logs
Add support for more selective pruning
tests: Add a big (many objects) pull
Release 2017.1
Dan Nicholson (3):
repo: Fix indentation
repo: Fix object list keys ownership
repo: Fix list_objects annotations
Mario Sanchez Prada (1):
static-delta: Pretend that world unreadable objects are new objects
Paul van Tilburg (1):
admin: Use execlp() to look for systemctl as the shell would
Simon McVittie (3):
Fix TAP syntax in test-basic-user.sh, and run it
Sourced test snippets: remove shebang and make non-executable
Make corrupt-repo-ref.js executable
Git-EVTag-v0-SHA512: f6a195f995f2269a3312aa57dea7e575cfd38030dc6237590b1c00ebf117666604a149b864a60ab5685d4384b07661dce1960a4d0d230697046ac48e73b7ccfc
-----BEGIN PGP SIGNATURE-----
iQEwBAABCgAaBQJYhm+2Exx3YWx0ZXJzQHZlcmJ1bS5vcmcACgkQ3EX9WSHBPwtM
gQf+PDEGF6JSj82cpfm9j6ghqhUULgiJWS96zR3Y+QGJuyUG12vhh4G+oXgWZ6PC
N8bInWnylzYNYVvfHx8DErIi+GZrILYgDDo2yV+C3GRUUY6POZmTO1NyzPAVDbMV
p/qYKj3w2a5LeZXbl8+hoL/sNcrrpzKJwNdL4j4c5sxhkSrlGtNNVgtkPA+qIUXv
9HolOoa5/JWY1mL8d31US3cOzSFswJPd6M8kki3kqCdTozpD82WbICiWazXepyuS
NdG5V6l7oosYtwcv/TKqo05Omu+DFQd7CoJEKuvZpbLgrwtO7rINvRDXJPvuEEb7
sdYOzUax1YhkgvemDBSLHkyEWg==
=Rwxg
-----END PGP SIGNATURE-----
Published by cgwalters almost 8 years ago
This release is mostly bugfixes - for example, it cleans up the vast
majority of memory leaks caught by ASAN. We also build without
libsoup again, which is preparatory for a potential addition
of a libcurl HTTP backend.
Another notable change is that we now always checksum individual
objects even when applying static deltas, regardless of whether or not
the summary file is signed. This is part of an ongoing thread about
supporting OCI as a transport layer.
Alexander Larsson (5):
pull: scan_commit_object() - don't load variant twice
ostree-repo-traverse: Don't leak floating GVariant
pull_with_options: Don't leak csum_v
pull: Don't leak delta superblock variants
delta compilation: Fix leak
Colin Walters (34):
[ASAN] delta compilation: More leak fixes
[ASAN] deltas: Fix minor memory leak
[ASAN] cmdline: Fix minor leak in delta cmdline entrypoint
traverse: Use g_hash_table_add
[ASAN] sysroot: Fix leak/double free of keyfile origin
[ASAN] metalink: Fix leaks of buffer
[ASAN] bootconfig: Drop a pointless strdup in parser
[ASAN] set-origin: Squash a leak
[ASAN] tests: Fix leaks
Define and use cleanup helpers for libarchive
[ASAN] tests: Cleanup all current remaining leaks
tests: Use G_DEBUG=fatal-warnings here too
tests/keyfile-utils: Drop tests covering preconditions
lib: Always checksum content in deltas
pull: Write .commitpartial for local pulls first too
lib: Remove unused ostree_metalink_get_uri()
tree-wide: Use g_hash_table_add() where applicable
ci: Make all ci tests gating for Homu
build: Add more default errors
lib: Ensure we use _GNU_SOURCE in enum templates
fetcher: Define an abstraction over SoupURI
build: Make libsoup optional again
[ASAN] sysroot: Squash a leak in lockfile acquisition
build: Always do enum scanning now
tree-wide: Switch to autoptr for GOptionContext
build: Error if glib isn't found
repo: Add unconfigured-state to remote config options
Skip gjs-based tests if ASAN is enabled
tests: Tweak installed tests to deal with ASAN
ci: Drop sudo installed tests
ci: Combine UBSAN and ASAN by default
lib: Squash last use of GFile deltas_dir
ci: Rebase to f25
Release 2016.15
Dan Nicholson (1):
repo: Fix annotations for remote_fetch_summary functions
Jasper St. Pierre (1):
ostree-repo-traverse: Remove an accidental print statement
Mario Sanchez Prada (1):
man: Mention bare-user in manpages, along with the other modes
Simon McVittie (13):
build: clean up ostree-remount if building without systemd
ci-build: consistently use yes/no for booleans, not yes/empty
ci-install: add ci_distro
travis-ci: put an explicit copyright/license on the scripts
travis-ci: Use a non-ostree-specific name for the Docker image
travis-ci: Move helper function to before we start building anything
travis-ci: cat the test log after successful test runs
travis-ci: Run `make distcheck` too
travis-ci: Use "slim" Debian image for testing
travis-ci: Enable stretch (the future Debian 9), replacing unstable
travis-ci: document parameter variables
tests: prepend to an existing LD_LIBRARY_PATH, GI_TYPELIB_PATH
Terminate individual tests after (10 * $TEST_TIMEOUT_FACTOR) minutes
Git-EVTag-v0-SHA512: 18060109c2493e6a1524e293c8a664b4a8da1f23c6b25761083fc50f806aa06911d8d58171fa2985909ea1e33a011c7d3e0dc824cda54b4699fe8b04e0a1a00d
-----BEGIN PGP SIGNATURE-----
iQEwBAABCgAaBQJYTuJtExx3YWx0ZXJzQHZlcmJ1bS5vcmcACgkQ3EX9WSHBPwsN
DQf/cMQmtVotFK81Lu/NuebOPaKJtaB0gx/TDW0ODJuPO15PTVYBbDLfFwIg4cCG
KtiKp4YVGBeBjK04lLNovrpcZts7xfrRIrUiprAzPfbmDciEChg9LGUEz5WfcI+b
s88Lg+3OHDZbI3M3vdAu9nX02M8Go80lkUshG/SEnAruZg2Kis8l3ciiShKylSVr
X7Ndp3IOHKnut03jcI6SK9BGpSbCx5CHatYnvExYq50DXptWLr9CfQitGDiBtdVk
fMTvSSeZMJSnAp56y0KdentJiRePbYeAyhAUPTrNpgTxlt0WUJeh58qlmV2AHA7l
GUbFLVNinNfOVCS30TmPIADMeA==
=8Pnb
-----END PGP SIGNATURE-----
Published by cgwalters almost 8 years ago
First, this release adds GPG verification for the commit objects
inside deltas. This was a vulnerability if you are fetching content
over plain HTTP, and is still important if using TLS. More
information is available in the commit
and there is continuing upstream discussion
of transport integrity models.
Also regarding GPG, we now make it easier to use a GPG ASCII key
in a remote configuration.
Another major thing in this release is that we started making more use
of the GCC/Clang sanitizers like
-fsanitize=address
, -fsanitize=undefined
etc. and numerous small
memory leaks were fixed in particular.
Thanks to all contributors!
Abhay Kadam (1):
Fix broken link in docs/CONTRIBUTING.md
Alexander Larsson (1):
commit: Fix reading xattrs from OstreeRepoFile:s
Colin Walters (17):
travis: Drop debian unstable since we can't fetch packages reliably
pull: Add support for `http-headers` option
pull: Redo logic for "scanning"
lib: Define and use cleanup functions for gpgme
lib: Split out helper function to create GPG context
Add "gpgkeypath" option to remotes
lib: Add an API to GPG verify a commit given a remote
[UBSAN] deltas: Don't call memset(NULL, NULL, 0) with no xattrs
[TSAN] main: Stop calling g_set_prgname()
[TSAN] Rework assertions to always access refcount atomically
pull: Dedup code for checking for > 0 valid results
pull: Use new per-remote API for GPG verification
pull: Do GPG verify commit objects when using deltas
tests: Support TEST_SKIP_CLEANUP=err
[ASAN] tests: Fix some memleaks in libarchive importer
[ASAN] lib: Squash various leaks in library and commandline
Release 2016.14
Jasper St. Pierre (3):
ostree-repo: Fix parameter name
ostree-repo-static-delta-processing: Don't close(-1)
ostree-repo: Make the lock with a long-lasting FD
Jonathan Lebon (1):
.redhat-ci.yml: no longer install libubsan & clang
William Manley (1):
ostree commit: Fix combining trees with multiple --tree=ref arguments
Git-EVTag-v0-SHA512: 6756eef81978c4a9559327972b53019f9ea214ab92af266054d303770e7a60684e73fba0870fda81b5262a0ab3aae3f89d962cd346930932a3c668f081d5726a
-----BEGIN PGP SIGNATURE-----
iQEwBAABCgAaBQJYNcd6Exx3YWx0ZXJzQHZlcmJ1bS5vcmcACgkQ3EX9WSHBPwtu
mgf/Z1rDWdTKAdvnJ4jR4eW2yKJYMrok0QUZXn2Q7MlA/1O0qtY6GudlNdScW9Tr
WFMydw6xr04PCQFMofsK14KkeD4eZqAAon2dyrnoZM1A5a6rVjfBSYLgVf8k+oIl
yZxlqHjKnKSnW985lIIrZPanFTk8aekXL2oMzQtr0xKjflcpeW6XJvm7fMIfv+dM
pyLlDQA6zfo+eQ8fgKJc9opx7MTmVACcP4Efzvj+YV3msLRVOqs5S2WE76CDhL5T
KV0AnVfSTYY1PQLfgwOmqSAyV2nCf96aUIYquHqMz/pt5p2WElxTMKuD5YYB7GoG
goDEz0dNJDER+65leUUtGCqYZg==
=n2Vt
-----END PGP SIGNATURE-----
Published by cgwalters almost 8 years ago
There is one notable feature in this release - we
now support per-remote cookies, which can be used
for systems like Amazon CloudFront that can be configured
to require them for access.
Another interesting change is the static delta generation
process was tweaked to look for "similar" filenames, which
for example should ensure we get dracut's "reproducible"
initramfs in the delta.
That aside, it's mostly smaller bugfixes here, such
as memory leaks. Another good example of a bugfix
is pull: Don't do deltas with --commit-metadata-only
.
Thanks to all contributors!
Alexander Larsson (1):
Fix pruning of partial commits
Colin Walters (14):
docs: Link to releng-scripts
tests: Skip libarchive/selinux tests if in container without SELinux
tree-wide: Remove unused variables detected by CLang
otutil: Note that ot_log_structured takes a printf format
parse-datetime: Use labs() for long input value
deploy: Suppress unused variable warning for fscreatecon cleanup
Define an initializer for GVariant{Builder,Dict}
libglnx: Bump to master (for -fsanitize fixes)
remote-refs: Add NULL terminator to options array
ci: Use -fsanitize=undefined by default
repo: Don't put remote refs in the summary file
pull: Don't do deltas with --commit-metadata-only
deltas: Only keep one file open at a time during compilation
Release 2016.13
Giuseppe Scrivano (1):
static-delta: find a similar filename using what is before '.' or '-'
Jonathan Lebon (3):
.redhat-ci.yml: add clang
delta: return valid enum member
.redhat-ci.yml: use new build key
Simon McVittie (14):
Force C.UTF-8 or C locale for tests
Distribute test scripts even if we wouldn't run them
Distribute valgrind suppressions in tarballs
_ostree_kernel_args_replace_take: don't leak when replacing
ot_admin_builtin_set_origin: don't leak options GVariant
ostree_builtin_pull: consistently set free-function on refs_to_fetch
ostree_admin_option_context_parse: explicitly clean up when exiting early
ostree_sysroot_upgrader_finalize: free new_revision
_ostree_sysroot_write_deployments_internal: stop leaking hash table
keyfile_set_from_vardict: free the string array
ostree_repo_pull_with_options: clear dirs array
ot_remote_builtin_show_url: autofree context
Fix some leaks of floating GVariants
load_metadata_internal: don't leak GBytes
Sjoerd Simons (8):
Filter bootloader supplied kernel cmdline options
pull: Add per-remote cookie jar
remote: Add command to list cookies
remote: Add commands to add and remove cookies for a remote
OsreeFetcher: Treat 403 as not found
trivial-httpd: Add support for checking cookies
tests: Add test for the cookie jar handling
Update documentation for cookie handling commands
Git-EVTag-v0-SHA512: 905067d8a6ba66af636a7de20baa779b661a4e4df9b13fe95b1883c1db34b700b180e854af22866cd93e51d59a24b062cfbb1ce444342076eabcdf7d05900f67
-----BEGIN PGP SIGNATURE-----
iQEwBAABCgAaBQJYJLe3Exx3YWx0ZXJzQHZlcmJ1bS5vcmcACgkQ3EX9WSHBPwuN
tAf/dtJ5VhuQz31Pcbk0jQHuuL5V6UP/8Z2hlUNmqNFGKv228ciMGG4Vo68SDYRm
sCU6PPw/aKOQwzFMnqMTFNO6AhLdjc10iZz/TtaEQX5+cSYxTPSBVqQa8WvLLvyj
AuAZS7GcxDsis4XEho66wRGeDlyFA7ECIaXWs+jtGKwkHiA2tmxqibO7PIR1Zlr8
F8U5jjTtUSJYFic5HovjJab73PxjM92dLnPLGG2ttr5r9ezabzeJZJ45RkQWNGwh
BtQJh9mXM614yvwDxvjmv2/ShuWmqfXlC3jOiPI66JfN+D34XMW3cPuqOTgq16G9
hHZwQM9JPLm+NHloZb4IU1grFA==
=gV4o
-----END PGP SIGNATURE-----
Published by cgwalters almost 8 years ago
Ths is a smaller point release that mostly brings in some pull API enhancements
for flatpak.
Two other notable changes:
Alexander Larsson (5):
pull: Support inherit-transaction
pull: Support multiple specifications of --subpath
Fix regression for symlinks in bare-user repos
ostree_repo_read_commit_detached_metadata: Handle parent repo
detached metadata: Put these in transaction
Colin Walters (2):
core: Do create hardlinks to symlinks for checkouts
Release 2016.12
Jonathan Lebon (5):
docs: amend vmlinuz & initramfs naming convention
ostree-sysroot-deploy.c: delete redundant check
OstreeFetcher: provide proxy credentials if needed
add .redhat-ci.yml and .redhat-ci.Dockerfile
.redhat-ci.yml: use projectatomic/ostree-tester
Git-EVTag-v0-SHA512: 5eaafb1caf50a53e64d316ac624958b2878b849c65bbbc7aae4a2a90cf4053a3dcc134a8c4474185c12f6c9dce036acc00e2087c3027d230a5a7a6099a216e63
-----BEGIN PGP SIGNATURE-----
iQEwBAABCgAaBQJYCm+zExx3YWx0ZXJzQHZlcmJ1bS5vcmcACgkQ3EX9WSHBPwtn
vgf+K1Zf4tOjYOnxDGLaKp3Yf9Z+2lTvcYfOwffQq5BNu3SXVQ/Bf5Tg6O618V3W
oGKsu0m9wR8/nMqoVzdKyVjYVIdqq98TMpE3iYhPR0RbYYAcVe79/93F1Kg0tM3O
IbohVdJ1Sd4FRrlXM6IFfDKtxxg+AVZY8F+luQOTT6hMt15BgqJG6kXUGN2/tDLf
ghg9OoFBYHg6rCkjggTpeN70Alvj4fRuIWRjWMJ6s+Fj0oho6uhA46VBwzWiJWN/
qxfaQ22RsuQq5sW8QY3PdCeslinlVZyHiAFxxI3ep2hNDYN+8fs7/exhifebC8RO
gwXtxePAQr657tFifXofrEayYA==
=JXtm
-----END PGP SIGNATURE-----
Published by cgwalters about 8 years ago
Just a collection of smaller fixes. One thing I want to note
is that 2016.10 regressed things to flip fsync back on by default
for users of ostree_repo_checkout_at
(notably rpm-ostree). This
is now fixed. We also continue dropping unecessary calls to fsync()
in favor of our global syncfs()
.
This release also fixes integration with
systemd-journal-flush.service
, ensuring that systems configured for
persistent journal have it saved correctly.
Colin Walters (10):
pull: Do allow executing deltas when mirroring into bare{,-user}
sysroot: Port some small cleanup code to fd-relative
sysroot: Port origin writing code to fd-relative
sysroot: Drop an fsync for origin file when writing deployments
sysroot: Drop an unnecessary fsync
boot: Ensure we remount /var writable before systemd does journal flush
checkout: Fix fsync defaults for new API to be off for real
trivial-httpd: Port mostly to fd-relative
libglnx: Update to latest
Release 2016.11
Dan Nicholson (1):
admin: Allow running status unlocked
Jonathan Lebon (3):
static-delta: add some error handling
ostree_sysroot_init_osname: also create /var/log
docs: add mention of rpm-ostree package layering
Owen W. Taylor (2):
ostree-repo.c: Fix file descriptor cleanup
ostree_sysroot.c: Don't close sysroot_fd twice.
Simon McVittie (1):
Fix spelling of "repository"
Published by cgwalters about 8 years ago
First, there's some ongoing work in this release to support
systems without an initramfs, which is common in the classical embedded
space. Thanks to William Manley and Gatis Paeglis! I expect in the
future to do more work on improving ostree for the embedded case, such
as making more dependencies optional, and notably supporting libcurl.
In working on OCI/OSTree integration, we realized that some
APIs like checkout and archive import weren't introspectable. There's
a new checkout API that use booleans rather than bitfields, and the
previous one is deprected.
Thanks to Simon McVittie for improving the test suite, and extending
it to Debian on Travis.
This release is also notable for the completion of the port to "libglnx",
so OSTree no longer depends on libgsystem.
Besides that, this release is mostly bugfixes.
Thanks to all contributors!
Colin Walters (49):
tests: Fix karg tests on ostree-booted system
Revert "tests/libtest.sh: Print non-matching file on failure"
repo: Ensure we set mode for bare-user files before xattrs
builtins/commit: Switch to using ostree_repo_write_dfd_to_mtree()
build: Make symlink depend on source
docs/formats: Elaborate a bit on delta from NULL usage
repo: Fix leak with ostree_repo_commit_traverse_iter_init_commit()
pull: Don't execute static deltas when mirroring
trivial-httpd: Fix leak of option context
glib.supp: Suppress some dynamic type registrations too
pull-local: Explicitly unref variant rather than relying on floating
glib.supp: Suppress worker context -> thread bits
fetcher: Explicitly join thread if it's not self
glib.supp: Suppress g_task -> thread leaks
sysroot: Fix a leak in deployment dirpath API
deploy: Fix leaks in parsing /etc/os-release
lib: Fix leak in bootconfig parser
lib: Fix compiler warning from previous patch
tests/delta-crosscheck: Add missing --from
deltas: Handle untrusted checksums faster and more robustly
libglnx porting: Migrate to new tempfile code
repo: Make ostree_repo_create() nonfatal on existing repos
deploy: Replace a use of gs_file_enumerator with compat wrapper
repo: Port sign_data() to libglnx tmpfile APIs
repo: Port to g_autoptr() rather than old style cleanup macros
lib: Port away from gs_file_rename()
grub2: Port away from gs_file_sync_data()
deltas: Port compilation to libglnx/fd-relative
repo: Flip the fsync default to off for new checkout API
lib: Add padding booleans to OstreeRepoCheckoutAtOptions
Update libglnx for O_TMPFILE build time option
lib: Use libglnx file replace API more consistently
lib: Fix a compiler warning introduced from earlier patch
repo: Port metadata writing code to fd-relative
lib: Drop GFiles for self->{objects_dir,state_dir}
repo: Drop internal GFile config_file
.travis.yml: Delete, we aren't using it right now
repo: Drop more internally unused GFile members
build: Import attributes.m4, detect CFLAGS at build time
build: Make -Werror=int-conversion fatal
repo: Fix an uninitialized variable
deploy: Port file copying code to GLnxDirFdIterator
deploy: Use internal recursive copy rather than libgsystem
build: Update .gitignore
prune: Retain the tip of each ref even with date pruning
Final excision of libgsystem dependency
travis: Disable email notifications
tests: Port sysroot.js away from libgsystem
Release 2016.8
Dan Nicholson (5):
repo: Fix annotation for ostree_repo_add_gpg_signature_summary
lib: Fix version script node ordering
core: Add allocating b64 checksum functions
deltas: Allow processing of empty delta parts
tests: Add test for delta with empty parts
Giuseppe Scrivano (5):
Makefile-tests.am: make check uses the built binaries
libostree: new function ostree_repo_checkout_at
libostree: mark ostree_repo_checkout_tree_at as deprecated
libostree: skip introspection for two functions
libostree, ostree: fix usage of ostree_repo_checkout_tree_at
Jonathan Lebon (3):
libglnx: bump to latest
static-delta: fix command contexts
static-delta: remove unused struct
Matthew Leeds (1):
README: Fix broken link Closes: #397 Approved by: cgwalters
Simon McVittie (3):
Update libglnx: Add missing files to libglnx distribution
Skip tests that use whiteouts under Docker/aufs
travis: run the test suite on various distributions
William Manley (10):
tests: Add basic tests for ostree-prepare-root
ostree-prepare-root: Refactor code to resolve deploy_path
ostree-prepare-root as init: exec init from deployment if run as PID1
ostree-prepare-root: Cope with /proc not being mounted
ostree-prepare-root: Refactor: Create /sysroot.tmp much later
Refactor ostree-prepare-root: Perform chdir to deploy directory earlier
ostree-prepare-root: Use pivot_root if real sysroot is already mounted at /
ostree-prepare-root: Make error message capitalisation consistent
ostree-prepare-root: Fix typo in error message
ostree-prepare-root: Add test that overlayfs over /usr works.
Git-EVTag-v0-SHA512: f819c064f27c2fc62ca80ad7448c6ab59ef5425542dd5e43d4e89152cf1bf92075d00ee2ce7dc4c7b853bad48a893b20c4cb6cd9b6936c100ca864ab8b51aba7
Published by cgwalters over 8 years ago
This release is almost entirely bugfixes. Most notable is a fix for a
relatively rare race condition in the pull code on cleanup (after
completion), and also a memory leak.
Besides that, there are improvements for the test suite, some more
porting away from libgsystem, a bugfix for static deltas important to
flatpak, build tweaks for older glib, etc.
Thanks to all contributors!
Alexander Larsson (2):
pull: Correctly handle repo->parent_repo when applying static deltas
tests: Test partial commits for local remotes
Bastien Nocera (1):
libostree: Fix build failure with glib 2.42
Colin Walters (17):
libostree.sym: Fix test-symbols
libglnx porting: Use of GSDirFdIterator
lib: Use sd_journal directly (optionally)
lib: Use g_file_enumerator_iterate() if available, with fallback
libglnx porting: Drop uses of gs_file_openat_noatime
pull: Write commitpartial files for local imports too
build-sys: Make libostree-1.so depend on the symbol file
rofiles-fuse: Do allow fchmod/fchown on directories
checkout: Add an option to require hardlinks
delta: Add --if-not-exists option
docs: Add a section on Docker
tests/libtest.sh: Print non-matching file on failure
tests: Add some test coverage of repeated pulls w/HTTP 500s
fetcher: Hold a ref to main context for lifetime of thread
fetcher: Clear all data for session in session thread
fetcher: Remove unused GTask structure member
Release 2016.7
Dan Nicholson (6):
tests: Remove gpg verification files from EXTRA_DIST
tests: Ensure mutable deployments from libostreetest
build: Distribute libglnx and bsdiff Makefile templates
tests: Remove extra $CMD_PREFIX from test-auto-summary.sh
tests: Improve check for /proc/cmdline kargs
build: Override systemd unit directory for distcheck
Jonathan Lebon (2):
ostree admin switch: fix short summary
static-delta-core.c: squash unused var warning
Krzesimir Nowak (1):
core: Fix wrong return value docs
Mathnerd314 (5):
core: Use OSTREE_SHA256_STRING_LEN instead of 64
configure: Turn on -Wempty-body
core: Add OSTREE_OBJECT_TYPE_COMMIT_META
refs: Fix a logic error
pull: Free fetch_data by default
Simon McVittie (3):
entry_pathname_test_helper: these tests need extended attributes
tests: use our own generated libtool, not the one in $PATH
tests: fail the build if symlinking tests/ostree fails
Yu Qi Zhang (2):
refs: allow overwrite of empty folders
refs: resolve conflict between local/remote repos
Git-EVTag-v0-SHA512: 782bd89c873f94081a7ec1bd8d1d802738960e48580a1ca6dbe00d86e7700fb7d36e86148100d30d7523c19a836b3abe7a8495327e238942817ec5700c165a64
-----BEGIN PGP SIGNATURE-----
iQEcBAABCgAGBQJXgAYTAAoJENxF/VkhwT8L2J4H/AtKy2cJ8fzVmhwAhpL8+M4A
g6ayVp1xMj46tj1e3ifzfYmtonjdqoDUsTyVfcwT0ZTfSc83URL2IRUhyfYu6778
9/jvULJrIG7KDSuG0IJg4BZGg+LhsNMpzgy17rzMM4+fWhppXJTGETHBsvNnaNtp
z1agBRgT4mBMAD1HYQJNjlngCYsXyBFP3WGiC72wOyMff+HlDmaELbuKMZBvj0Fu
G9UQ5H2V0JeRBkCsf6npfBI0zHVefx02x0DvOVXXXXWQXqAdAD9x4NyelWiq7fYE
uldvo/P4QjNdKllbWfjV/UwclDajcjIkrSl2HIwfTLER3LLKIXwb6YqP0LKO4I4=
=+m3G
-----END PGP SIGNATURE-----
Published by cgwalters over 8 years ago
Release 2016.6
There's quite a lot of changes in this release since 2016.5, but one
thing I want to call out explicitly is that we fixed a race condition
in the HTTP pull code that could cause hangs or crashes that mostly
occurred only when doing "large" pulls (thousands of object requests).
If this occurs, client systems can work around it by cancelling and
retrying the pull.
Other high level changes:
Jonathan Lebon:
ostree-repo-libarchive.c: major refactor
This laid more groundwork for rpm-ostree to import RPM (CPIO) archives
sanely. If you are integrating with an existing package management
format, this should help a lot.
Mathnerd314 (11):
repo: use OSTREE_TIMESTAMP (=1) for checked-out files
Is a quite interesting change - we previously used a timestamp of
zero, but Nix has apparently done better with 1
for various reasons.
This is a pretty subtle change, so be on the lookout for regressions.
Thanks to all contributors!
Alexander Larsson (13):
ostree export: Add --subpath support
ostree export: Add --prefix option
repo: Allow loading files staged in the transaction
repo: Fix temporary directory allocation
repo: Handle parent repos with different remote configuration
tests: Fix build with old glib
Build on older versions of glib
libotutil: Fix leak of VariantMapData
pull: Fix leak of debug temporary strings
pull: Fix leak of FetchObjectData in some cases
pull: Fix leaked uri in request_static_delta_superblock_sync
pull: Fix leak of refs_to_fetch
tests: Exit valgrind tests if a leak is detected
Colin Walters (50):
core: Remove ostree_checksum_update_meta that was not implemented
lib: Remove ostree_repo_file_make_empty_tree
Rename test-abi to test-symbols, start verifying symbols are documented
libtest: Skip FUSE if CAP_SYS_ADMIN not in bounding set
repo: Simplify internal has_object() lookup code
deploy: Start hardlinking kernel/initramfs on single-part again
build: Introduce --with-dracut=yesbutnoconf
libglnx porting: Migrate from GSConsole
repo: Fix reading repos on read-only media
repo: Add OSTREE_REPO_TEST_ERROR=pre-commit env var
repo: Add OSTREE_BOOTID override envvar for debugging
repo: Clean up staging directory for previous boot IDs
repo: Make repo/tmp expiry configurable via tmp-expiry-seconds
lib: Add more filename validations (no ., .. or /) in commit logic
libglnx porting: Migrate to glnx_stream_fstat()
build: Use --std=gnu99
trivial-httpd: Add attribute((format))
Make enum generation private by default, export stub symbol
build: Don't run glib-mkenums if there's nothing to do
README: x/xdg-app/flatpak/
libglnx porting: Port "load utf8 file" contents API callers
repo: Port uncompressed cache GC to libglnx
libglnx porting: Port callers of gs_file_unlink to just unlink()
libglnx porting: Port away from gs_file_ensure_directory()
sysroot: Correct error handling path in previous libglnx port
core: Port to new libglnx tempname API
lib: Change ot_util_variant_map helpers to consistently sink refs
lib: Drop GFile variant mapping API for fd-relative
libglnx porting: Port away from gs_file_map_noatime()
glnx porting: Port away from gs_file_get_basename_cached()
tests: Use strict mode by default for C tests
tests/test-pull-c: New test that runs through the pull API via C
glnx porting: Drop last uses of gs_file_get_basename_cached()
libglnx porting: Drop last use of gs_transfer_out_value()
glnx porting: Drop use of gs_file_openat_noatime
lib: Add _ALLOW_NOENT
flag to internal variant mapping API
lib: Add a helper for mmap->bytes with openat(), use it in repo
repo: (minor) Drop a GFile usage in signature creation
lib: Fix a leak in remote parsing
lib: Add OSTREE_SUPPRESS_SYNCFS environment variable
tests: Modernize valgrind infrastructure
lib: Port some manual close() cleanups to be glnx_fd_close
manual: Link to mender.io
Add "archive" as an alias for "archive-z2"
repo: Avoid a possible divide by zero in progress
manual: Discuss mirroring
build: Fix libreaddir-rand to honor global CFLAGS
tests: Support OT_SKIP_READDIR_RAND
pull: Ensure we always process queue only from main thread
Release 2016.6
Gatis Paeglis (3):
Remove unused variables from install_deployment_kernel
Fix --enable_rofiles_fuse=no build
Fix build when have_libsoup_client_certs=no
Giuseppe Scrivano (1):
man: add missing options for commit
Jonathan Lebon (7):
ostree-repo-libarchive.c: major refactor
ot-builtin-commit.c: add --skip-list option
tests/test-libarchive.sh: add more test
tests/test-libarchive-import.c: add tests
OstreeRepo: add extensions directory
ostree_repo_write_commit: add missing docstring arg
configure.ac: properly check for bison
Krzesimir Nowak (26):
lib: Fix a typo
trivial-httpd: Remove useless code
lib: Fix an introspection annotation
tests, lib: Remove unused variables
lib: Add URL override pull option
pull: Add a --url option
trivial-httpd: Add a --log-file option
tests: Add a test for ostree pull --url
sysroot: Plug some leaks
core: Improve variant format docs
repo: Plug a leak
repo: Allow using options for fetching summary
libostree: Variant-related leak plugs and fixes
libostree: Fix bracket-missing warnings
libostree: Add g_autoptr() support for the public types
build: Remind about bumping related versions
build: Allow ostree to use g_autoptr on its types internally
build: Install new autocleanups header
libotutil: Plug a leak
core: Add a function creating an archive-z2 content stream
repo: Factor out the check of gpg result to a separate function
repo: Add a missing Returns paragraph
repo: Factor out setting up a GPG verifier
repo: Add functions for verifying any data in repository
summary: Fix a typo
repo: Fix build on 32-bit systems
Mathnerd314 (11):
commit: accept NULL subject argument
commit: Add --editor / -e command line argument
commit: Display subject/body in commit editor
commit: Don't require a subject
log: Display "(no subject)" for commits without a subject
commit: Update manpage to reflect --editor
repo: use OSTREE_TIMESTAMP (=1) for checked-out files
pull: Move libsoup-related code from ostree-repo.c to ostree-repo-pull.c
pull: Move pull and pull_onedir back into ostree-repo.c
docs: Get API docs working again
related-projects: Update with more information and projects
Micah Abbott (1):
docs: fix swapped link syntax
Sam Spilsbury (2):
Makefile: Move to AM_DISTCHECK_CONFIGURE_FLAGS
repo: Display estimated time remaining when pulling
Simon McVittie (12):
libtest: show files' contents when assertions about them fail
test-parent: this test requires user xattrs
test-sysroot.js: set "strict mode" when sourcing libtest.sh
Link libreaddir-rand to libdl
autogen.sh: rely on VPATH for submodules' Makefile-*.am.inc
build: distribute libostree.sym in tarballs
build: distribute test scripts in tarballs
build: distribute TAP helper scripts in tarballs
build: distribute more test files
libtest: make gpghome in tmpdir writeable
libostreetest: include libtest.sh from srcdir, not builddir
build: re-create tests/ostree-symlink-stamp if Makefile changes
Yu Qi Zhang (2):
refs: add "ostree refs --create" and unit tests
libglnx porting: delete temp files on failure of file creation
Git-EVTag-v0-SHA512: 216ec7ea61eeabb0404207b01387b7de85276b2fbf09e39928f4800eddac06904d690dbf66260282a1cc4127f15a68feb0a8da31921d7d943856569cb81b1d6f