Tags · aleb/ostree

There is now support for making the [`/sysroot` mount point read-only to start](ostreedev#1767), and this is used by Fedora CoreOS today. This protects against a lot of accidental damage, and also generalizes and improves the previous special case handling of having `/boot` read-only. One known issue is that `ostree pull` is broken with this enabled, and this will be fixed.

Error-handling around GPG verification has had an overhaul. Specifically, libostree now has more specific error codes to distinguish between different verification failures. This should allow apps to have more fine-grained control over how to respond to errors. Do note that the error messages themselves have changed, and we strongly suggest that anyone relying on a specific error message string to migrate to using the API directly.

The original "archive" (split up objects) format didn't make it easy for a client system to know how much data it would be downloading. Later, static deltas were added which addressed this problem, but there are situations in which object fetches still occur. Later then support for optional `sizes` metadata in commit objects was added but was never really stabilized/publicized. There were also some bugs in it. [That is now completed](ostreedev#1957) - the sizes data is now stable. and new API was added to read it.

This release adds [initial fs-verity support](ostreedev#1959); it doesn't do too much today. Bigger picture it's important to understand that the vision of OSTree is to enable Linux systems that feel like they're "image based" (transactional, versioned updates, no dependency resolution client side), but also to enable things like doing commits on the client side. Today rpm-ostree supports replacing the kernel client side as a first class operation. This is crucially important to make it feel truly like a Linux system that *you own*. See also [this blog](https://blog.verbum.org/2019/12/23/starting-from-open-and-foss/). Having a story for how system integrity works in this model is more complicated, but we (the CoreOS team at RHT) will be continuing work on it.

A small tweak was made to have OSTree create repo structure directories and files (such as `objects/` or `.lock`) with group write permissions. This is useful for managing OSTree remote servers from multiple UIDs. For systems with the default umask of `0022`, this should have no effect.

We've extensively reworked CI for the upstream repo. In addition to Travis, testing is now done on top of Fedora CoreOS. Not all tests have been carried over, but expect to see more coming. This rework will also allow us to have more comprehensive tests previously not possible.

Several fixes were made to the test suite to handle the cases of systemd vs no-systemd, and `systemd` is now advertised in the list of features in `ostree --version` if present.

---

```
$ git shortlog --no-merges v2019.6..
Alex Kiernan (6):
test-switchroot.sh: Exclude /proc from file list
build: Expose systemd in OSTREE_FEATURES
tests: Skip /var test if running with systemd and libmount
test-switchroot.sh: Find ostree-prepare-root in installed tests
fixup! test-switchroot.sh: Find ostree-prepare-root in installed tests
build: fix systemd feature advertisement

Cole Robinson (1):
docs: Fix 'package layering' rpm-ostree link

Colin Walters (8):
Post-release version bump
finalize-staged: Use the core option parsing to load sysroot
Support mounting /sysroot (and /boot) read-only
Initial fs-verity support
Add .cci.jenkinsfile
travis: Update debian/ubuntu environments
ci: Replace PAPR with CoreOS CI
deploy: Avoid trying to change immutable state unnecessarily

Dan Nicholson (26):
lib/commit: Only set generate_sizes for archive repos
tests/sizes: Improve metadata validation
lib/commit: Fix object sizes metadata for multiple commits
lib/commit: Make size entries for existing objects
tests/sizes: Test sizes metadata with existing objects
tests/sizes: Test that sizes metadata is not reused
tests/sizes: Check duplicate file doesn't add sizes entry
libarchive: Support commit sizes metadata
core: Add OstreeCommitSizesEntry type
core: Add ostree_commit_get_object_sizes API
bin/show: Add --print-sizes option to show sizes metadata
tests/core: Really pick C.UTF-8 locale
ci/rpmostree: Bump to 2019.4
lib/gpg: Prefer declare-and-initialize style
tests/libtest: Record long GPG key IDs and fingerprints
tests/libtest: Make temporary gpghome private
tests/gpghome: Create revocation certificates for keys
tests/gpg-verify-data: Split out signature data
tests/gpg-verify-data: Empty out trustdb.gpg
tests/test-gpg-verify-result: Allow specifying signature files
lib/gpg: Add more specific OstreeGpgError codes
tests/gpg: Test ostree_gpg_verify_result_require_valid_signature
tests/gpg: Add tests for importing updated remote GPG keys
ci/flatpak: Patch GPG error assertions from OSTree
ostree/trivial-httpd: Fix --autoexit with --daemonize and --log-file
ostree/trivial-httpd: Add log message for autoexit

John Hiesey (1):
lib/commit: Include object type in sizes metadata

Jonathan Lebon (1):
lib/repo: Create repo directories as 0775

clime (1):
Update ostree-pull.xml with info about pulled refs location and access

```

Git-EVTag-v0-SHA512: b3907c7d53696eee789bf9be60df54385a3146347b78752212745b2f84e0429b5d50f8cb7408b2be483757893e1b65dc1eeb5c8fa1f6446efbe81efbd998e249

Feb 20, 2020
04c85fa
zip
tar.gz

v2019.6

Release 2019.6

Nothing major in this release, but we have some
bigger stuff outstanding and ready to merge, so I
want to get this release out so that work will
have time to stabilize.

A few build/CI fixes.  A new progress API which
will be used by flatpak (and can be used by others).
Finally, we also avoid reordering kernel arguments.

Thanks to all contributors!

```
git shortlog --no-merges v2019.5..
Alex Kiernan (5):
      tests/core: Fallback to en_US.UTF-8 locale
      tests: Handle EPIPE failures when head terminates
      tests/core: Assume C.UTF-8 if locale isn't found
      tests: Avoid musl failure with `cp -a`
      build: create tests directory for split builds

Colin Walters (6):
      Post-release version bump
      lib/keyfile: Treat "group not found" the same as "key not found"
      Bump libglnx
      tests/repo-finder: Run realpath() on /tmp
      pull: Add support for basic auth
      Release 2019.6

Philip Chimento (2):
      Bump version in symbols file
      libostree: Add ostree_async_progress_copy_state()

Ricardo Salveti (1):
      Makefile: declare ostree_boot_SCRIPTS and append values

Robert Fairley (1):
      lib/kernel-args: Store kernel args as key/value entries

Sam Thursfield (1):
      README.md: Tweak text about BuildStream

Stefan Agner (1):
      Avoid race condition when building outside of source tree
```

Git-EVTag-v0-SHA512: 915ebfe9501a74ca86a3b3aceafad352f4730fb148cc1874f2e49c7076fa1a948049fe9bd96b081502995b56096892a7405f5628f4e2e749bfaed2f35136f42a

Dec 10, 2019
978bd19
zip
tar.gz

v2019.5

Release 2019.5

Mainly in this release:

 - We discovered that CLang has a static analyzer `scan-build`;
   it found some small memory leaks so far, otherwise mostly
   noise, but we haven't dug through all the errors yet.
 - Gained a new zipl (s390x bootloader) backend
 - Install the `.hmac` files needed for FIPS mode in `/boot` too

This is also the first release where we switched to using
the OpenShift Prow as a merge bot, though a lot more CI work
is pending.

```
Alex Kiernan (5):
      Always enable trivial-httpd for tests
      Gate ostree-trivial-httpd on BUILDOPT_TRIVIAL_HTTPD
      Revert "Gate ostree-trivial-httpd on BUILDOPT_TRIVIAL_HTTPD"
      Revert "Always enable trivial-httpd for tests"
      tests/export: Guard with check for libarchive

Colin Walters (25):
      ci: Honor ARTIFACTS environment variable
      ci: Make ${ARTIFACTS} directory
      OWNERS: New file
      libostree: Add an assert to pacify clang-analyzer
      repo: [scan-build] Initialize a variable
      sysroot: [scan-build]: Remove a dead assignment
      sysroot: [scan-build] Remove a dead assignment
      repo: [scan-build]: Mark a variable used
      libotutil: Port keyfile-utils.c to new style
      ci: Skip all yum operations if SKIP_INSTALLDEPS is set
      commit: [scan-build] Remove a dead assignment
      tree-wide: [scan-build]: Add some asserts that pointers are non-NULL
      prune: [scan-build] Initialize a variable
      bootloader: Add a zipl bootloader backend
      ci: Trim PAPR config to drop required flag
      tree-wide: [scan-build] Fix some dead stores
      lib/repo: [scan-build] Quiet a dead store warning
      lib/pull: [scan-build] Silence a dead store warning
      tests: Port keyfile test to new style
      lib: Port variant-builder.c to new style
      tests: [scan-build] Initialize a variable
      lib/checksum-utils: Use g_memdup()
      build-sys: Cleanup handling for trivial-httpd-cmdline
      Revert "grub2: Exit gracefully if the configuration has BLS enabled"
      Release 2019.5

Dan Nicholson (1):
      repo: Stop using deprecated G_GNUC_FUNCTION

Javier Martinez Canillas (1):
      grub2: Exit gracefully if the configuration has BLS enabled

Jonathan Lebon (6):
      Post-release version bump
      configure.ac: Add more details on how to do a release
      src/libotutil: Fix strv memory leak
      lib/pull: Avoid calling destroy on unref'ed GSource
      lib/pull: Tweak update_timeout logic again
      lib/deploy: Also install HMAC file into /boot

Umang Jain (1):
      async-progress: Plug memory leak while destroying GSource

```

Git-EVTag-v0-SHA512: 395f281ee8286eb6d22c215abc5146e1f27ecba6b120abee045d178150ea2116dd87e0e82b2d9ef4c150dec719716ae0d2583e5a1f9f38cb790fa81f55867e70

Oct 30, 2019
980ca07
zip
tar.gz

v2019.4

2019.4

This is mostly a bugfix release. Notably, the 2019.3 release caused some issues
related to the gpg-agent code spewing messages on the terminal. Additionally,
Fedora 31 users have hit upon issues with `ostree-finalize-staged.service`
running too late to be able to write back its logs to the journal. This then
confused `rpm-ostree` after reboot, because it looks at the previous boot's
journal for this message.

The biggest feature-ish change is support for a partial commit "reason" so that
after `ostree fsck --delete` was used, subsequent `ostree fsck` will continue to
report an error.  This should be used by higher level tools that want to do
"fsck and repair".  It's likely at some point that "fsck and repair" logic will
move down into the libostree core as well.

There are ongoing efforts to port Fedora CoreOS to s390x: one fix landed here to
add the deployment prefix to BLS entries since it's what the `zipl` bootloader
expected.

Special thanks to first-time contributors Benjamin Gilbert and Jason Wessel!

---

```
Benjamin Gilbert (1 PR, 1 commit)
  prepare-root: remember to remove /sysroot.tmp (ostreedev#1919)

Colin Walters (4 PRs, 4 commits)
  Post-release version bump (ostreedev#1902)
  sysroot: Add a clearer error if /boot/loader isn't found (ostreedev#1905)
  ci: Add prow/ subdirectory with Dockerfile (ostreedev#1906)
  fsck: Fix version in docs, tweak error text (ostreedev#1918)

Dan Nicholson (3 PRs, 3 commits)
  lib/gpg: Only show gpg-connect-agent stderr on failures (ostreedev#1908)
  lib/gpg: Don't kill gpg-agent on newer gnupg (ostreedev#1915)
  lib/gpg: Use g_spawn_sync to kill gpg-agent (ostreedev#1917)

Jason Wessel (1 PR, 2 commits)
  PR: ostreedev#1910
    fsck: Add test for --delete corruption, fix repair, and partial commit checks
    fsck: Implement a partial commit reason bitmask

Javier Martinez Canillas (2 PRs, 3 commits)
  lib/bootconfig-parser: Always include deployment index in BLS title (ostreedev#1911)
  PR: ostreedev#1904
    lib/bootconfig-parser: Write BLS fragment fields in a deterministic order
    lib/bootconfig-parser: Remove support to preserve comments in BLS files

Jonathan Lebon (2 PRs, 3 commits)
  boot/finalize-staged: Run after systemd-journal-flush.service (ostreedev#1926)
  Release 2019.4 (ostreedev#1927)

Philip Withnall (1 PR, 1 commit)
  lib/repo-pull: Add more debugging on pull failure (ostreedev#1925)
```

Git-EVTag-v0-SHA512: 55b10530b19a813298e0fa1485961182be0002b33cb45effe2f619d91a6a2225be4966774f6c58c15104f32df857ffa48e7b52126020fa075f90610958eb077f

Sep 25, 2019
9d39e7d
zip
tar.gz

v2019.3

Release 2019.3

A lot of changes since the last release.  On the feature side,
probably the biggest is we've made public the internal API
for kernel arguments, which rpm-ostree now uses.

Other things include a new `--modern` switch for `init-fs`,
better support in `pull` for downgrade protection, better
use of `mmap`, support for committing archives (tarballs)
from stdin, etc.

Finally, libostree now supports being built without GPG,
which is an important preparatory piece for introducing
an alternative signature system - look for more work
on that soon.

Thanks to all contributors!

```
Allen Bai (1 PR, 1 commit)
  lib/kargs: Make API public and upstream new rpm-ostree APIs (ostreedev#1869)

Allen Bai (1 PR, 1 commit)
  lib/util: Fix segfault when validating filename (ostreedev#1868)

Colin Walters (4 PRs, 4 commits)
  Add OSTREE_BUILT_FEATURES to ostree-version.h (ostreedev#1890)
  admin/init-fs: Add a --modern switch (ostreedev#1894)
  README.md: Rework "projects using" section (ostreedev#1895)
  Release 2019.3 (ostreedev#1902)

Dan Nicholson (5 PRs, 16 commits)
  bin/refs: Allow overwriting existing ref (ostreedev#1870)
  PR: ostreedev#1799
    tests: Always cleanup gpg-agent when exiting
    tests/libtest: Allow appending actions to be run on EXIT
    lib: Kill GPG agent when cleaning up tmp homedirs
    lib/gpg: Add helper to kill GPG agent
  PR: ostreedev#1872
    tests/test-gpg-signed-commit: Test more key states
    tests/libtest: Allow specifying GPG homedir to cleanup
    lib/gpg: Show if GPG key has been revoked
    lib/gpg: Show information for expired keys
    lib/gpg: Factor out expiration timestamp formatting
  PR: ostreedev#1884
    tests/sizes.js: Fix byte array unpacking
    tests/sizes: Fix call to commit_transaction()
  PR: ostreedev#1892
    ci/rpmostree: Bump to 2019.3
    lib/kargs: Don't expose OstreeKernelArgs autoptr cleanup on old glib
    tests/gpg: Skip tests when subkeys can't be expired
    tests/gpg: Use exit hook to kill agent in temporary GPG homedir

Daniel Drake (1 PR, 1 commit)
  lib/deploy: handle FIFREEZE ENOSYS failure (ostreedev#1901)

Denis Pynkin (1 PR, 9 commits)
  PR: ostreedev#1889
    tests/test-repo-finder-mount: skip some tests if GPG is not supported
    tests/gpg: fix GPG-dependent shell tests if no GPG support
    tests/gpg: fix the check of GPG support
    gpg: add dummy public interface
    lib: rename common sign/verification functions and variables
    gpg: conditionally build GPG-related code for sign/verification
    build: Conditionally build the GPG-related tests
    build: Conditionally build GPGME-related sources
    build: Add conditional use of GPGME

Felix Krull (2 PRs, 6 commits)
  README: update link to ostree-rs (ostreedev#1860)
  PR: ostreedev#1861
    lib: add parameter annotations for sysroot_load_if_changed
    lib: add some missing (out) annotations
    lib: fix up some nullability annotations
    lib: add minimum version to various symbols based on libostree-released.sym
    lib: fix doc comment for ostree_repo_get_min_free_space_bytes

Jonathan Lebon (3 PRs, 4 commits)
  Post-release version bump (ostreedev#1844)
  bin: Better handle -- (ostreedev#1899)
  PR: ostreedev#1891
    lib/pull: Rename variable for clarity
    lib/pull: Allow downgrade protection with overrides

Matthew Leeds (1 PR, 1 commit)
  lib/repo: Improve docs for get_min_free_space_bytes() (ostreedev#1879)

Philip Withnall (1 PR, 1 commit)
  ostree-repo-finder: Clarify immutability after construction (ostreedev#1863)

Rafael Fonseca (2 PRs, 2 commits)
  admin: allow multiple args for pin subcommand (ostreedev#1874)
  lib/kargs: add missing function to symbol-versioning table (ostreedev#1883)

Richard Hughes (1 PR, 1 commit)
  lib: mmap the summary to reduce RSS in clients (ostreedev#1856)

Robert Fairley (4 PRs, 8 commits)
  ci: Split out installdeps.sh from build.sh (ostreedev#1865)
  lib/util: Drop unneeded ot-tool-util.h includes (ostreedev#1876)
  PR: ostreedev#1857
    lib/fetcher-util: Use GIOErrorEnum instead of GIOError
    tests: Drop unused variable
  PR: ostreedev#1871
    ci/flatpak: Bump FLATPAK_TAG to 1.4.1
    Makefile-libostree.am: Work around clang issues with g-ir-scanner
    ci/build-check: Remove unused-command-line-argument diagnostic
    ci: Use Fedora 29 artifacts

Tristan Cacqueray (3 PRs, 3 commits)
  docs: fix switchroot source link (ostreedev#1849)
  docs: fix missing as typo (ostreedev#1850)
  prepare-root: remove ignored MS_MGC_VAL flag (ostreedev#1851)

Tristan Van Berkom (1 PR, 4 commits)
  PR: ostreedev#1862
    tests: Test committing archives from stdin
    man: Document ability to commit archives from stdin
    bin/commit: Support committing archives from stdin
    lib/commit: Added new ostree_repo_write_archive_to_mtree_from_fd()
```

Git-EVTag-v0-SHA512: 0033fb6c93a0aed1518c93ac8ba153862da38e06e1e24fcae910121e36298295dff76cd7a38720e8ffa1c1899cdffd867ecd5350d9582b618eedd6172d6f5b8f

Aug 22, 2019
b15ed42
zip
tar.gz

v2019.2

Release 2019.2

It's been some time since the last release, so this is a slightly larger
one! There's lots of new features, and a few bug fixes. Some highlights
below.

New features:

- A new `sysroot.bootloader` key was added to be more explicit about
  which bootloader OSTree should use. Notably a `none` value is
  supported, in which OSTree is solely responsible for writing the BLS
  entries. This can then be used by bootloaders like GRUB2, which now
  supports BLS natively. (ostreedev#1814)
- `ostree config` now supports the `unset` command to unset a key from
  the OSTree repo config (ostreedev#1743)
- `ostree remote add` now supports the `--force` flag to replace a
  remote of the same name if it exists (ostreedev#1166)
- `ostree-prepare-root` now logs a structured journal message after
  finding the deployment to which to pivot. This can be used by
  higher-level apps like RPM-OSTree to build a history of the
  deployments the machine was booted into. (ostreedev#1842)
- The staging API now supports a lockfile which prevents finalization at
  shutdown. This is intended to be used in systems like Fedora CoreOS,
  which needs more fine-tuned control between *staging* a deployment,
  and setting it as the *default* deployment on reboot. (ostreedev#1841)
- `ostree static-delta show` now prints the `From` and `To` commits for
  which the delta was generated (ostreedev#1823)

Bug fixes:

- Make looking up collection-refs similar to how regular refs are looked
  up, i.e. first in the transaction, then in the current repo, and then
  in the parent repo (ostreedev#1821)
- Don't include the OSTree commit version number twice in the boot menu
  title. This affected at least Fedora-based systems composed with
  RPM-OSTree's `mutate-os-release`. (ostreedev#1829)
- Activate `ostree-finalize-staged` earlier; this should hopefully make
  deployment finalization more reliable by running it later in the
  shutdown sequence, when less services are running (ostreedev#1840)
- Run `grub2-mkconfig` on the filesystem tree of the pending deployment,
  rather than the previously deployed tree. This was a corner case where
  the deployment failed if a previous deployment did not exist, on
  systems where grub.cfg is used. (ostreedev#1831)

As always, thanks to all the contributors!

```
Colin Walters (5 PRs, 8 commits)
  Post-release bump (ostreedev#1800)
  static-delta: Change `show` to display from/to commits (ostreedev#1823)
  prepare-root: Fix compilation with --with-static-compiler (ostreedev#1846)
  PR: ostreedev#1803
    lib/commit: Don't set user.ostreemeta for bare → bare-user-only imports
    lib/commit: Set xattr on correct fd for bare-user → bare-user imports
    lib/commit: Fix bare → bare imports
  PR: ostreedev#1806
    ci/rpmostree: Bump to 2019.1
    ci/rpmostree: Fix use of `fatal`

Dan Nicholson (1 PR, 3 commits)
  PR: ostreedev#1166
    remote-add: Add --force option to add or replace remote
    man: Document remote add --if-not-exists option
    repo: Add OstreeRepoRemoteChange replace operation

Jeremy Bicha (1 PR, 1 commit)
  tests: Update for glib 2.59.2 (ostreedev#1818)

Jonathan Lebon (6 PRs, 9 commits)
  lib/deploy: Don't include version twice in bootmenu title (ostreedev#1829)
  boot: Activate ostree-finalize-staged even earlier (ostreedev#1840)
  ostree-prepare-root: Log journal message after finding deployment (ostreedev#1842)
  Release 2019.2 (ostreedev#1844)
  PR: ostreedev#1841
    lib/deploy: Support locking deployment finalization
    lib/deploy: Write to journal if nothing to finalize
    lib: Add ot_journal_* helper macros
  PR: ostreedev#1843
    lib/sysroot: Match deployment /usr mode for overlay
    lib/sysroot: Call `chmod` on overlay dirs when unlocking

Laurent Bonnans (1 PR, 1 commit)
  lib/repo: fix leak of `bootloader` field (ostreedev#1837)

Matthew Leeds (11 PRs, 17 commits)
  tests: Don't skip collection-based summary test (ostreedev#1804)
  lib/repo-pull: Allow the keyring remote to be overridden (ostreedev#1810)
  lib/repo-pull: Fix docs for n-network-retries option (ostreedev#1812)
  lib/repo: Fix Since: annotation for REMOTE_CHANGE_REPLACE (ostreedev#1813)
  tests: Remove unused includes in libostreetest.c (ostreedev#1815)
  man: Document ostree --version (ostreedev#1820)
  lib/repo-refs: Resolve collection-refs in-memory and in parent repos (ostreedev#1821)
  lib: Check for http_proxy being the empty string (ostreedev#1835)
  PR: ostreedev#1743
    ostree/config: Check for too many args
    man/ostree-config: Consistently use GROUPNAME placeholder
    ostree/config: Use g_autoptr instead of goto
    ostree/config: Add an "unset" operation
  PR: ostreedev#1825
    lib/repo-refs: Allow resolving local collection-refs
    lib/repo-refs: Add a flag to exclude listing from refs/mirrors
    lib/repo-refs: Fix resolving collection-refs
  PR: ostreedev#1834
    tests: Put a regex in quotes
    tests: Escape periods when appropriate

Micah Abbott (1 PR, 1 commit)
  README: add note about Liri OS (ostreedev#1802)

Robert Fairley (3 PRs, 9 commits)
  PR: ostreedev#1814
    Add sysroot.bootloader repo config key
    libotutil: Rename to ot_keyfile_get_string_list_with_separator_choice()
    tests/test-config: Remove extra space
    ostree-grub-generator: Comment wording fix
    (and 1 commit from other author)
  PR: ostreedev#1831
    grub2: Generate config from pending deployment
    tests/test-admin-deploy-none: Split grub.cfg directory and file creation
    tests/test-admin-deploy-none: Update comment for ostreedev#1774 status
  PR: ostreedev#1839
    tests/test-config: Fix regex causing Debian test failure
    travis: Update to Debian Stretch

Robert Fairley (1 PR, 1 commit)
  PR: ostreedev#1814
    libotutil: Add ot_keyfile_get_value_with_default_group_optional()
    (and 4 commits from other authors)
```

Git-EVTag-v0-SHA512: 1a900dac71e960a425bbf4252b91287f0c4a68719d21f719aa2a7741c8923905b9dd0c1b95eb5acbdc0b3dd2d7b4dab45b8c93847081a3eb9f1faca7d0d6cb63

Apr 26, 2019
80435e1
zip
tar.gz

v2019.1

Release 2019.1

This is the first libostree release of 2019; no big changes, just a collection of smaller
features and bugfixes.

On the features side, a good example is:
`lib/repo: Search a list of paths in gpgkeypath for gpg keys`
from PR ostreedev#1773 - this will be useful for Fedora which rotates GPG keys
across releases.

Another feature is `grub2: add support for devicetree`
from PR: ostreedev#1790

`lib/kargs: allow empty-list arguments` i.e.  PR ostreedev#1785 is between a
bugfix and feature - it ensures libostree supports "empty list" kernel
arguments.

There's also some ongoing work to have libostree be a "backend"
for OCI/Docker container storage; `checkout: honor opaque checkouts`
in PR ostreedev#1486 is part of that.

`pull: If built with --disable-http2, allow enabling via http2=1` from
PR ostreedev#1798 will allow people to more easily play with HTTP2 if
it's disabled by default.

Thank you to all contributors!

```
Alexander Larsson (1 PR, 1 commit)
  Fix leak in ostree_content_stream_parse() (ostreedev#1784)

Colin Walters (6 PRs, 8 commits)
  lib/commit: Try checksum+hardlink for untrusted local same-uid repos (ostreedev#1776)
  Update libglnx (ostreedev#1781)
  ci/papr: Drop insttests (ostreedev#1783)
  pull: If built with --disable-http2, allow enabling via http2=1 (ostreedev#1798)
  PR: ostreedev#1766
    ci: Add `dist-then-build` target to catch missing `EXTRA_DIST`
    build-sys: Dist ostree-finalize-staged.path
  PR: ostreedev#1800
    Post-release bump
    Release 2019.1

Giuseppe Scrivano (1 PR, 1 commit)
  checkout: honor opaque checkouts (ostreedev#1486)

Jonathan Lebon (7 PRs, 7 commits)
  bin/refs: Disallow creating broken aliases (ostreedev#1768)
  bin/pull-local: Add --commit-metadata-only (ostreedev#1769)
  lib/commit: Copy user.ostreemeta only for bare-user (ostreedev#1771)
  lib/commit: Add devino_cache_hits to txn stats (ostreedev#1772)
  bin/pull: Add URL metavar for --url switch (ostreedev#1782)
  boot/grub2: Add some more explanation in ostree-grub-generator (ostreedev#1791)
  PR: ostreedev#1761
    ostree/main: Wrap `Version` in `--version` in quotes
    (and 1 commit from other author)

Luca Bruno (1 PR, 1 commit)
  lib/kargs: allow empty-list arguments (ostreedev#1785)

Matthew Leeds (1 PR, 1 commit)
  lib/repo: Clarify docs for importing w/ trust (ostreedev#1777)

Matthias Clasen (1 PR, 2 commits)
  PR: ostreedev#1788
    Fix a small leak in ostree_repo_remote_list_collection_refs
    Fix a small leak in ostree_repo_pull_with_options

Rafael Fonseca (2 PRs, 2 commits)
  admin/status: Correctly check GPG signature (ostreedev#1787)
  admin/status: test GPG signature check (ostreedev#1797)

Ricardo Salveti (1 PR, 1 commit)
  grub2: add support for devicetree (ostreedev#1790)

Sinny Kumari (1 PR, 1 commit)
  atomic-upgrades doc: fix example url to fetch a ref checksum (ostreedev#1795)

Umang Jain (3 PRs, 3 commits)
  lib/repo-commit: Relax min-free-space check in prepare_transaction() (ostreedev#1779)
  man/ostree.repo-config: Update min-free-space-* docs (ostreedev#1786)
  PR: ostreedev#1761
    Post-release version bump
    (and 1 commit from other author)

rfairley (1 PR, 1 commit)
  lib/repo: Search a list of paths in gpgkeypath for gpg keys (ostreedev#1773)
```

Git-EVTag-v0-SHA512: e27d4941f2f4304c9d7afac93995bd47f0b25b186bd8436a2058bfb58258b12f03852ba775ed64436a5c5b1d53e52f33c1c9f065cfec993b96777a700e49da8b

Jan 11, 2019
13bcc49
zip
tar.gz

v2018.9

Release 2018.9

It's been two months since our last release, so this one is slightly
larger than usual (the ~monthly cadence).  It's mostly bugfixes
again, although there were some API additions and new
configuration options.

These new features are things like:

 - Allow disabling pulling from LAN/USB/Internet (ostreedev#1758)
 - lib/repo: Add an API to get min-free-space-* reserved bytes (ostreedev#1715)
 - OstreeMutableTree: add _remove method (ostreedev#1724)
 - repo: Add a checkout option to not hardlink zero-sized files (ostreedev#1752)

 On the bugfix side, nothing major; we have the usual small memory
 leak fixes (yeah, we use GCC autocleanups, but still, this is C).
 Beyond that, good examples of bugfixes are:

 - finalize-staged: Bump timeout to 5 minutes (ostreedev#1755)
 - deploy: Fix removing /var/.updated with separate /var mount (ostreedev#1730)
 - src/ostree: Don't delete refs having aliases (ostreedev#1749)

One notable change in this release is the initrd service
`ostree-prepare-root.service` now runs earlier in the boot process.
This shouldn't actually affect OSes, unless there's extended logic
in the initrd that integrates tightly with OSTree. The use case for this is
better integration with Ignition, which will be used in Fedora CoreOS.
PR: ostreedev#1759

Another systemd related change is the introduction of a path unit:
`ostree-finalize-staged.path`. This allows the service of the same name
to be path activated instead of explicitly started at deployment staging time.
This release however does not yet rely on this mechanism to give time for
packagers and integrators to adapt to the new unit (e.g. by enabling it in
the systemd presets). A future release will *require* this.
Note that deployment staging is still not the default for libostree, although
at least rpm-ostree now unconditionally uses staging, and while it
generally worked well, we hit issues with people using slower hard drives,
hence the increase in timeout in PR ostreedev#1755 .
PR: ostreedev#1740

Another change to call out is:
    lib/commit: Don't chown objects to repo target owner (ostreedev#1754)
We previously had incomplete support for a process running as uid 0
writing to a repository owned by a non-zero uid, but it was never finished.
This will likely be revisited at a later time.

We also merged:
    lib/grub2: Support Debian-style grub.cfg path (ostreedev#1714)
from a new contibutor (thanks Felix!).  Who incidentally also
posted recently about new Rust bindings:

    https://mail.gnome.org/archives/ostree-list/2018-October/msg00000.html
    https://crates.io/crates/libostree

Thanks a lot to all contributors!

```
Colin Walters (12 PRs, 13 commits)
  Post-release version bump (ostreedev#1705)
  deploy: Fix removing /var/.updated with separate /var mount (ostreedev#1730)
  lib/commit: Don't copy xattrs for metadata objects (ostreedev#1736)
  lib/progress: Fix leak of GSource (ostreedev#1741)
  Only verify OSTREE_MAX_METADATA_SIZE for HTTP fetches (ostreedev#1744)
  rofiles-fuse: Improve error message for failure to open root (ostreedev#1747)
  repo: Add a checkout option to not hardlink zero-sized files (ostreedev#1752)
  checkout: Support --union-identical and --force-copy{,--zerosized} (ostreedev#1753)
  finalize-staged: Bump timeout to 5 minutes (ostreedev#1755)
  remount: Refactor to helper function instead of loop (ostreedev#1760)
  README: Add bindings section (ostreedev#1762)
  PR: ostreedev#1757
    sysroot: Add error prefixing to deployment parsing
    sysroot: Update some code to use fstatat_allow_noent API

Dan Nicholson (1 PR, 1 commit)
  lib/commit: Don't chown objects to repo target owner (ostreedev#1754)

Felix Krull (1 PR, 1 commit)
  lib/grub2: Support Debian-style grub.cfg path (ostreedev#1714)

Jonathan Lebon (7 PRs, 12 commits)
  ci: Disable f28-rpmostree for now (ostreedev#1727)
  ci: Bump rpm-ostree tag to 2018.8 (ostreedev#1728)
  boot: Add ostree-finalize-staged.path (ostreedev#1740)
  lib/mutable-tree: Port to new style (ostreedev#1742)
  PR: ostreedev#1732
    lib/fetcher-curl: Prefix fatal errors with full URL
    lib/fetcher-curl: Drop unnecessary check
    lib/fetcher-util: Mark journaled msgs as LOG_ERR
  PR: ostreedev#1750
    lib/sysroot-deploy: Write to journal when finalizing
    boot: Add Documentation= lines to services
    boot: Remove [Install] from ostree-finalize-staged
  PR: ostreedev#1759
    ostree-prepare-root.service: Run earlier in initrd
    ostree-prepare-root.service: Use RemainAfterExit=yes

Laurent Bonnans (1 PR, 1 commit)
  lib/fetcher: Fix some memory leaks in curl fetcher (ostreedev#1716)

Matthew Leeds (10 PRs, 14 commits)
  avahi: Be robust to missing refs in peer summaries (ostreedev#1717)
  lib/repo: Clean up OstreeRepo docs (ostreedev#1725)
  lib/repo: Define a metadata key, ostree.deploy-collection-id (ostreedev#1726)
  create-usb: Always use archive mode (ostreedev#1733)
  create-usb: Add a --commit option (ostreedev#1735)
  bash-completion: Fix --repo autocomplete (ostreedev#1745)
  man/create-usb: Don't recommend summary updates (ostreedev#1746)
  PR: ostreedev#1737
    man/ostree.repo-config: Document locking options
    lib/repo: Fix minor mistake in locking docs
    lib/repo: Allow disabling lock timeout
  PR: ostreedev#1758
    lib/repo-pull: Disable LAN updates by default
    Allow disabling pulling from LAN/USB/Internet
  PR: ostreedev#1763
    Rename core.repo-finders to core.default-repo-finders
    lib/repo-pull: Add an explanatory comment

Robert McQueen (1 PR, 1 commit)
  OstreeMutableTree: add _remove method (ostreedev#1724)

Sinny Kumari (1 PR, 1 commit)
  src/ostree: Don't delete refs having aliases (ostreedev#1749)

Umang Jain (3 PRs, 6 commits)
  Release 2018.9 (ostreedev#1761)
  PR: ostreedev#1715
    lib/repo: Ensure min-free-space* config value doesn't overflow
    Add tests for ostree_repo_get_min_free_space_bytes
    lib/repo: Add an API to get min-free-space-* reserved bytes
  PR: ostreedev#1722
    tests: Update tests for ostree_repo_get_min_free_space_bytes()
    lib/repo: Separate min-free-space-* calculation from transaction codepath
```

Git-EVTag-v0-SHA512: 7d4337f3b58ddd13c825eb80c0e39ebd5f4db1368a34ba6a037264c9941b373ba594a7b9f3ac63cb85e64f475bf5589001032a7ba6da371a2c76a336b4c89c85

Oct 25, 2018
f3eba6b
zip
tar.gz

PreviousNext

Navigation Menu

v2020.3

v2020.2

v2020.1