lanzaboote

What's Changed

• treewide: 0.3.0 -> 0.4.1 by @nikstur in https://github.com/nix-community/lanzaboote/pull/358

Full Changelog: https://github.com/nix-community/lanzaboote/compare/v0.4.0...v0.4.1

What's Changed

• fix(deps): update all dependencies by @renovate in https://github.com/nix-community/lanzaboote/pull/172
• feat: minimal poc for exporting UEFI variables à la sd-boot by @RaitoBezarius in https://github.com/nix-community/lanzaboote/pull/166
• fix(deps): update all dependencies by @renovate in https://github.com/nix-community/lanzaboote/pull/175
• flake.lock: Update by @RaitoBezarius in https://github.com/nix-community/lanzaboote/pull/176
• Add rustfmt checks by @nikstur in https://github.com/nix-community/lanzaboote/pull/177
• feat: minimal poc for TPM measurements à la sd-stub by @RaitoBezarius in https://github.com/nix-community/lanzaboote/pull/167
• chore: sync our crates version to latest tag by @RaitoBezarius in https://github.com/nix-community/lanzaboote/pull/180
• tool(bootspec): remove boilerplate with newest bootspec by @RaitoBezarius in https://github.com/nix-community/lanzaboote/pull/179
• deps: update to uefi-rs 0.21.0 by @RaitoBezarius in https://github.com/nix-community/lanzaboote/pull/178
• fix(deps): update all dependencies by @renovate in https://github.com/nix-community/lanzaboote/pull/181
• tool: improve command error messages by @nikstur in https://github.com/nix-community/lanzaboote/pull/184
• Cleanup flake by @nikstur in https://github.com/nix-community/lanzaboote/pull/185
• docs: add precision about dbx and OptionROMs by @erdnaxe in https://github.com/nix-community/lanzaboote/pull/186
• docs: update upstreaming state by @RaitoBezarius in https://github.com/nix-community/lanzaboote/pull/188
• docs: fixup stray ``` by @RaitoBezarius in https://github.com/nix-community/lanzaboote/pull/189
• fix(deps): update rust crate log to 0.4.18 by @renovate in https://github.com/nix-community/lanzaboote/pull/191
• stub: add fat variant by @nikstur in https://github.com/nix-community/lanzaboote/pull/182
• stub: upgrade to uefi-rs 0.22.0 by @RaitoBezarius in https://github.com/nix-community/lanzaboote/pull/192
• fix(deps): update all dependencies by @renovate in https://github.com/nix-community/lanzaboote/pull/193
• feat(stub): throw compile error in case of enabling fat and thin feat… by @RaitoBezarius in https://github.com/nix-community/lanzaboote/pull/195
• project: move to nixpkgs Rust infrastructure by @RaitoBezarius in https://github.com/nix-community/lanzaboote/pull/147
• Fix eval when aliases are disabled by @SuperSandro2000 in https://github.com/nix-community/lanzaboote/pull/198
• update QUICK_START.md bootspec by @Janik-Haag in https://github.com/nix-community/lanzaboote/pull/200
• Further updates to QUICK_START.md by @Janik-Haag in https://github.com/nix-community/lanzaboote/pull/201
• docs: suggest to track released versions rather than master by @RaitoBezarius in https://github.com/nix-community/lanzaboote/pull/207
• flake: offer nix-community cache as a suggested substituter by @RaitoBezarius in https://github.com/nix-community/lanzaboote/pull/208
• Update all dependencies besides goblin by @nikstur in https://github.com/nix-community/lanzaboote/pull/209
• Revert "docs: suggest to track released versions rather than master " by @nikstur in https://github.com/nix-community/lanzaboote/pull/210
• docs: suggest to use 0.3.0 tagged release of lanzaboote rather than master by @RaitoBezarius in https://github.com/nix-community/lanzaboote/pull/211
• flake.lock: Update by @nikstur in https://github.com/nix-community/lanzaboote/pull/212
• Fix lzbt build with recent nixos-unstable by @SuperSandro2000 in https://github.com/nix-community/lanzaboote/pull/217
• Revert back to crane by @nikstur in https://github.com/nix-community/lanzaboote/pull/218
• tool: only sync ESP filesystem by @tilpner in https://github.com/nix-community/lanzaboote/pull/219
• stub: split up into a linux-bootloader crate by @RaitoBezarius in https://github.com/nix-community/lanzaboote/pull/215
• docs: Add hyperlinks to lzbt, stub file locations instead of static paths by @tuxiqae in https://github.com/nix-community/lanzaboote/pull/214
• flake: use an appropriate description by @nikstur in https://github.com/nix-community/lanzaboote/pull/222
• lzbt: abstraction for multiple backends by @RaitoBezarius in https://github.com/nix-community/lanzaboote/pull/206
• flake: remove nixConfig by @nikstur in https://github.com/nix-community/lanzaboote/pull/223
• stub: remove TPM 1 support by @nikstur in https://github.com/nix-community/lanzaboote/pull/224
• feat: support for AArch64 by @RaitoBezarius in https://github.com/nix-community/lanzaboote/pull/31
• Fix eval in flakes when aliases are disabled by @SuperSandro2000 in https://github.com/nix-community/lanzaboote/pull/231
• nix/modules/uki: fix ukify build by @RaitoBezarius in https://github.com/nix-community/lanzaboote/pull/230
• docs: Add troubleshooting documentation by @alois31 in https://github.com/nix-community/lanzaboote/pull/233
• Stop most overwriting in the ESP by @alois31 in https://github.com/nix-community/lanzaboote/pull/204
• stub: update to latest uefi crates by @blitz in https://github.com/nix-community/lanzaboote/pull/235
• Fix build with documentation.nixos.includeAllModules = true; by @Ma27 in https://github.com/nix-community/lanzaboote/pull/236
• stub: pin to current goblin version by @blitz in https://github.com/nix-community/lanzaboote/pull/238
• stub: improve handling of insecure boot by @alois31 in https://github.com/nix-community/lanzaboote/pull/232
• fix(deps): update all dependencies by @renovate in https://github.com/nix-community/lanzaboote/pull/196
• Pin EDK2 202305 by @blitz in https://github.com/nix-community/lanzaboote/pull/241
• chore(deps): lock file maintenance by @renovate in https://github.com/nix-community/lanzaboote/pull/216
• Consistently Display Generations in systemd-boot by @blitz in https://github.com/nix-community/lanzaboote/pull/242
• chore(deps): lock file maintenance by @renovate in https://github.com/nix-community/lanzaboote/pull/243
• linux_loader: improve code quality + bug fix by @phip1611 in https://github.com/nix-community/lanzaboote/pull/244
• fix(deps): update all dependencies by @renovate in https://github.com/nix-community/lanzaboote/pull/246
• chore(deps): lock file maintenance by @renovate in https://github.com/nix-community/lanzaboote/pull/247
• docs: clarify migration path for new installations by @Mic92 in https://github.com/nix-community/lanzaboote/pull/248
• Lightweight Shell by @blitz in https://github.com/nix-community/lanzaboote/pull/245
• chore(deps): lock file maintenance by @renovate in https://github.com/nix-community/lanzaboote/pull/249
• tests: add 5 minutes default timeout by @RaitoBezarius in https://github.com/nix-community/lanzaboote/pull/250
• chore(deps): lock file maintenance by @renovate in https://github.com/nix-community/lanzaboote/pull/255
• fix(deps): update rust crate serde_json to 1.0.108 by @renovate in https://github.com/nix-community/lanzaboote/pull/254
• feat(flake): perform final fixups to the flake outputs by @RaitoBezarius in https://github.com/nix-community/lanzaboote/pull/257
• fix(deps): update all dependencies by @renovate in https://github.com/nix-community/lanzaboote/pull/258
• Remove Nondeterminism in Stub by @blitz in https://github.com/nix-community/lanzaboote/pull/261
• Parse Systemd Release Candidate Versions by @blitz in https://github.com/nix-community/lanzaboote/pull/263
• flake: remove "moving away the unsupportedChecks" by @RaitoBezarius in https://github.com/nix-community/lanzaboote/pull/265
• fix(deps): update rust crate clap to 4.4.10 by @renovate in https://github.com/nix-community/lanzaboote/pull/267
• fix(deps): update all dependencies by @renovate in https://github.com/nix-community/lanzaboote/pull/269
• fix(deps): update rust crate anyhow to 1.0.76 by @renovate in https://github.com/nix-community/lanzaboote/pull/270
• add framework specific instructions by @Mic92 in https://github.com/nix-community/lanzaboote/pull/272
• add more helpful message in case of append_initrd_secrets script failure by @JulienMalka in https://github.com/nix-community/lanzaboote/pull/253
• fix(deps): update all dependencies by @renovate in https://github.com/nix-community/lanzaboote/pull/276
• Use the original os-release file parser by @rbran in https://github.com/nix-community/lanzaboote/pull/275
• fix(deps): update all dependencies by @renovate in https://github.com/nix-community/lanzaboote/pull/281
• chore(deps): update all dependencies by @renovate in https://github.com/nix-community/lanzaboote/pull/283
• make pre-commit-hooks-nix optional by @Mic92 in https://github.com/nix-community/lanzaboote/pull/282
• chore(deps): lock file maintenance by @renovate in https://github.com/nix-community/lanzaboote/pull/259
• add aarch64 ci by @Mic92 in https://github.com/nix-community/lanzaboote/pull/280
• readme: make upstreaming section more timeless by @nikstur in https://github.com/nix-community/lanzaboote/pull/286
• Small fixes & updates by @nikstur in https://github.com/nix-community/lanzaboote/pull/287
• fix(deps): update all dependencies by @renovate in https://github.com/nix-community/lanzaboote/pull/288
• chore(deps): lock file maintenance by @renovate in https://github.com/nix-community/lanzaboote/pull/289
• Revert "chore(deps): lock file maintenance" by @nikstur in https://github.com/nix-community/lanzaboote/pull/290
• chore(deps): lock file maintenance by @renovate in https://github.com/nix-community/lanzaboote/pull/291
• chore(deps): lock file maintenance by @renovate in https://github.com/nix-community/lanzaboote/pull/293
• fix(deps): update rust crate serde_json to 1.0.113 by @renovate in https://github.com/nix-community/lanzaboote/pull/292
• fix(deps): update all dependencies by @renovate in https://github.com/nix-community/lanzaboote/pull/297
• chore(deps): lock file maintenance by @renovate in https://github.com/nix-community/lanzaboote/pull/298
• fix(deps): update all dependencies by @renovate in https://github.com/nix-community/lanzaboote/pull/308
• chore(deps): lock file maintenance by @renovate in https://github.com/nix-community/lanzaboote/pull/309
• UKI Compatibility for systemd 255 by @blitz in https://github.com/nix-community/lanzaboote/pull/302
• feat(cpio): introduce pio, a library to write CPIO in alloc contexts by @RaitoBezarius in https://github.com/nix-community/lanzaboote/pull/304
• chore(deps): lock file maintenance by @renovate in https://github.com/nix-community/lanzaboote/pull/312
• fix(deps): update all dependencies by @renovate in https://github.com/nix-community/lanzaboote/pull/311
• fix(deps): update all dependencies by @renovate in https://github.com/nix-community/lanzaboote/pull/316
• chore(deps): lock file maintenance by @renovate in https://github.com/nix-community/lanzaboote/pull/317
• readme: add mention of "Windows UEFI Mode" needed on some boards by @jh-devv in https://github.com/nix-community/lanzaboote/pull/314
• stub(*): support dynamic initrds by @RaitoBezarius in https://github.com/nix-community/lanzaboote/pull/305
• tests: remove custom OVMF overrides by @nikstur in https://github.com/nix-community/lanzaboote/pull/318
• fix(deps): update all dependencies by @renovate in https://github.com/nix-community/lanzaboote/pull/320
• chore(deps): lock file maintenance by @renovate in https://github.com/nix-community/lanzaboote/pull/321
• chore(deps): lock file maintenance by @renovate in https://github.com/nix-community/lanzaboote/pull/325
• fix(deps): update rust crate clap to 4.5.2 by @renovate in https://github.com/nix-community/lanzaboote/pull/324
• Add more framework-specific hints by @blitz in https://github.com/nix-community/lanzaboote/pull/326
• Refactor tests by @nikstur in https://github.com/nix-community/lanzaboote/pull/323
• chore(deps): lock file maintenance by @renovate in https://github.com/nix-community/lanzaboote/pull/330
• Elaborate on entering Setup Mode by @justinas in https://github.com/nix-community/lanzaboote/pull/328
• fix(deps): update all dependencies by @renovate in https://github.com/nix-community/lanzaboote/pull/329
• chore(deps): lock file maintenance by @renovate in https://github.com/nix-community/lanzaboote/pull/332
• fix(deps): update all dependencies by @renovate in https://github.com/nix-community/lanzaboote/pull/331
• docs: BitLocker recovery key warning by @dweee in https://github.com/nix-community/lanzaboote/pull/336
• chore(deps): update all dependencies by @renovate in https://github.com/nix-community/lanzaboote/pull/334
• fix(deps): update all dependencies by @renovate in https://github.com/nix-community/lanzaboote/pull/337
• fix: remove deprecated lib.mdDoc by @Jappie3 in https://github.com/nix-community/lanzaboote/pull/338
• fix(deps): update all dependencies by @renovate in https://github.com/nix-community/lanzaboote/pull/339
• Fix encoding issues by @hesiod in https://github.com/nix-community/lanzaboote/pull/347
• fix(deps): update all dependencies by @renovate in https://github.com/nix-community/lanzaboote/pull/346
• chore(deps): lock file maintenance by @renovate in https://github.com/nix-community/lanzaboote/pull/335
• Update flake by @nikstur in https://github.com/nix-community/lanzaboote/pull/352
• rust: update 1.75 -> 1.78 by @nikstur in https://github.com/nix-community/lanzaboote/pull/353

New Contributors

• @erdnaxe made their first contribution in https://github.com/nix-community/lanzaboote/pull/186
• @Janik-Haag made their first contribution in https://github.com/nix-community/lanzaboote/pull/200
• @tilpner made their first contribution in https://github.com/nix-community/lanzaboote/pull/219
• @tuxiqae made their first contribution in https://github.com/nix-community/lanzaboote/pull/214
• @Ma27 made their first contribution in https://github.com/nix-community/lanzaboote/pull/236
• @phip1611 made their first contribution in https://github.com/nix-community/lanzaboote/pull/244
• @JulienMalka made their first contribution in https://github.com/nix-community/lanzaboote/pull/253
• @rbran made their first contribution in https://github.com/nix-community/lanzaboote/pull/275
• @jh-devv made their first contribution in https://github.com/nix-community/lanzaboote/pull/314
• @justinas made their first contribution in https://github.com/nix-community/lanzaboote/pull/328
• @dweee made their first contribution in https://github.com/nix-community/lanzaboote/pull/336
• @Jappie3 made their first contribution in https://github.com/nix-community/lanzaboote/pull/338
• @hesiod made their first contribution in https://github.com/nix-community/lanzaboote/pull/347

Full Changelog: https://github.com/nix-community/lanzaboote/compare/v0.3.0...v0.4.0

This version supports the officially merged Bootspec RFC-125 from NixOS. Previous versions are not guaranteed to work anymore with future versions of NixOS.

What's Changed

• tests: correctly test appending secret to initrd by @nikstur in https://github.com/nix-community/lanzaboote/pull/117
• Properly handle fwupd update capsules by @dasJ in https://github.com/nix-community/lanzaboote/pull/113
• Revert "Properly handle fwupd update capsules" by @blitz in https://github.com/nix-community/lanzaboote/pull/119
• docs: add non-flakes quick start documentation by @RaitoBezarius in https://github.com/nix-community/lanzaboote/pull/118
• Configure Renovate by @renovate in https://github.com/nix-community/lanzaboote/pull/120
• fix(deps): update all dependencies by @renovate in https://github.com/nix-community/lanzaboote/pull/122
• tool: init configurable logging by @nikstur in https://github.com/nix-community/lanzaboote/pull/121
• tool: fine tune a few log messages by @nikstur in https://github.com/nix-community/lanzaboote/pull/125
• fix(deps): update all dependencies by @renovate in https://github.com/nix-community/lanzaboote/pull/130
• Don't Reload Stub from the File System by @blitz in https://github.com/nix-community/lanzaboote/pull/132
• chore(deps): lock file maintenance by @renovate in https://github.com/nix-community/lanzaboote/pull/138
• fix(deps): update all dependencies by @renovate in https://github.com/nix-community/lanzaboote/pull/137
• Properly handle fwupd update capsules, take 2 by @lilyinstarlight in https://github.com/nix-community/lanzaboote/pull/131
• nixos-module: add settings key for the loader.conf by @kanashimia in https://github.com/nix-community/lanzaboote/pull/134
• Use birth time instead of modify time for generation "built on" date by @adtya in https://github.com/nix-community/lanzaboote/pull/139
• tool: drop buggy condition for when to sign by @Myaats in https://github.com/nix-community/lanzaboote/pull/142
• fix(deps): update all dependencies by @renovate in https://github.com/nix-community/lanzaboote/pull/145
• nix: clean up fwupd-efi handling a little bit by @lilyinstarlight in https://github.com/nix-community/lanzaboote/pull/141
• stub: make it compatible with a stable Rust compiler (≥ 1.68.x) by @RaitoBezarius in https://github.com/nix-community/lanzaboote/pull/149
• chore(deps): update all dependencies by @renovate in https://github.com/nix-community/lanzaboote/pull/152
• stub: implement flush_instruction_cache on i686 and AArch64 by @alois31 in https://github.com/nix-community/lanzaboote/pull/151
• Bump Rust Overlay by @blitz in https://github.com/nix-community/lanzaboote/pull/156
• flake: reduce number of dependencies by @Mic92 in https://github.com/nix-community/lanzaboote/pull/157
• Avoid Unbootable System on Bootspec Changes by @blitz in https://github.com/nix-community/lanzaboote/pull/155
• tool: revert log level of malformed gens by @nikstur in https://github.com/nix-community/lanzaboote/pull/158
• tool: Switch back to mtime by @dasJ in https://github.com/nix-community/lanzaboote/pull/160
• fix(deps): update rust crate clap to 4.2.4 by @renovate in https://github.com/nix-community/lanzaboote/pull/159
• tool: disable gc in the presence of malformed gens by @nikstur in https://github.com/nix-community/lanzaboote/pull/161
• tool: improve log message about malformed gens by @nikstur in https://github.com/nix-community/lanzaboote/pull/164
• bootspec: RFC-0125 final changes by @RaitoBezarius in https://github.com/nix-community/lanzaboote/pull/148
• feat: enable synthesis support by @RaitoBezarius in https://github.com/nix-community/lanzaboote/pull/163

New Contributors

• @renovate made their first contribution in https://github.com/nix-community/lanzaboote/pull/120
• @lilyinstarlight made their first contribution in https://github.com/nix-community/lanzaboote/pull/131
• @kanashimia made their first contribution in https://github.com/nix-community/lanzaboote/pull/134
• @adtya made their first contribution in https://github.com/nix-community/lanzaboote/pull/139
• @Myaats made their first contribution in https://github.com/nix-community/lanzaboote/pull/142

Full Changelog: https://github.com/nix-community/lanzaboote/compare/v0.2.0...v0.3.0

What's Changed

• Fix mixed tabs and spaces by @SuperSandro2000 in https://github.com/nix-community/lanzaboote/pull/97
• nixos/lanzaboote: use config.systemd.package by @ercao in https://github.com/nix-community/lanzaboote/pull/102
• tool: read build time from symlink by @nikstur in https://github.com/nix-community/lanzaboote/pull/100
• tool: improve sd-boot generation display name by @nikstur in https://github.com/nix-community/lanzaboote/pull/101
• tool: make some utility test functions reusable by @nikstur in https://github.com/nix-community/lanzaboote/pull/108
• Add a More Complete Flakes Fragment for Quickstart by @blitz in https://github.com/nix-community/lanzaboote/pull/105
• tool: use random names for secure tempfiles by @nikstur in https://github.com/nix-community/lanzaboote/pull/107
• Update Dependencies of Stub by @blitz in https://github.com/nix-community/lanzaboote/pull/111
• tool: ensure correct up to date files in the ESP by @nikstur in https://github.com/nix-community/lanzaboote/pull/110
• tool: correctly update initrd secrets by @nikstur in https://github.com/nix-community/lanzaboote/pull/109
• tool: fix typos by @nikstur in https://github.com/nix-community/lanzaboote/pull/115
• Minimalistic Logging Support by @blitz in https://github.com/nix-community/lanzaboote/pull/112
• Make File Installation Order Deterministic by @blitz in https://github.com/nix-community/lanzaboote/pull/116

New Contributors

• @SuperSandro2000 made their first contribution in https://github.com/nix-community/lanzaboote/pull/97
• @ercao made their first contribution in https://github.com/nix-community/lanzaboote/pull/102

Full Changelog: https://github.com/nix-community/lanzaboote/compare/v0.1.0...v0.2.0

What's Changed

A lot. :) This is our first release.

New Contributors

• @Mic92 made their first contribution in https://github.com/nix-community/lanzaboote/pull/25
• @Laurent2916 made their first contribution in https://github.com/nix-community/lanzaboote/pull/53
• @dasJ made their first contribution in https://github.com/nix-community/lanzaboote/pull/86
• @alois31 made their first contribution in https://github.com/nix-community/lanzaboote/pull/75

Full Changelog: https://github.com/nix-community/lanzaboote/commits/v0.1.0