Ensures that predefinined values are repsected as well, since some
of them might be needed by distro settings at global context
Signed-off-by: Khem Raj <raj.khem@gmail.com>
When running ptests using meta-oe-image-ptest-ostree image
these packageconfig/soup3 and utf8 locale is needed
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Cc: Jose Quaresma <quaresma.jose@gmail.com>
it checks for strace and then try fault injection if it exists. So,
while it will be good to have strace port for rv32 it can be disabled
for now
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
===========
-prepare-root: Unify root.transient with composefs
-libostree: write selinux xattr when on non-selinux systems
-ostree.repo-config(5): Fix a typo
-Expose MOUNT_ATTR_IDMAP detection result to C code
-docs/atomic-rollbacks: Add a section on rollbacks
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
$ git --no-pager log --oneline v2023.8...v2023.7
5b23804a (tag: v2023.8) Release 2023.8
6e303318 Merge pull request #3106 from cgwalters/commit-reflink
c3dff62e commit: Try reflinks for local commits by default
59b9f9a8 Merge pull request #3105 from cgwalters/sysroot-borrow-fd
09e32d61 Merge pull request #3107 from cgwalters/drop-userxattr-test
bab87cbd tests: Drop bare-user on tmpfs negative test
15d0777b Merge pull request #3104 from cgwalters/s390x-target
c3aa2958 bootloader/zipl: Run in target deployment as container if needed
aa635bf5 sysroot: Expose deployment runner outside of selinux
e794a0c0 Merge pull request #3103 from cgwalters/tmpfiles-factory-var
d3190dbf sysroot: Add a method to borrow sysroot fd
74456972 sysroot: Support specifying bwrap arguments
791337fa sysroot: Expose deployment container executor internally
66064d96 tmpfiles: Copy `/usr/share/factory/var` to `/var`
b0be2336 Merge pull request #3102 from cgwalters/deploy-cleanup-run
68cc1960 sysroot/deploy: Drop unnecessary g_ptr_array_free
31cbcc72 deploy: Use NULL terminated strv
5cc78fd7 Merge pull request #3100 from cgwalters/misc-finalization
d3de3a0a tests: Add a dedicated finalization test
d24714e3 Merge pull request #3101 from cgwalters/drop-redundant-includes
0c85e1ff main: Drop some redundant includes of `ot-main.h`
78905ffb man: Two finalization fixes
12cbb3dd Merge pull request #3090 from cgwalters/stabilize-locking
28cc7618 sysroot: Stabilize deployment finalization, add API and CLI
1ca4f02a status: Add error prefix for gpg verification
b6f435fe tests: Turn off gpg verification for dev builds
ff7e7f47 Merge pull request #3099 from markmc/man-sysroot-readonly
2cfa8aba man: improve sysroot.readonly docs
cd1728a4 Merge pull request #3098 from jlebon/pr/abort-concurrent
8002983d ci: cancel previous build on PR update
de22914e Merge pull request #3097 from cgwalters/symbol-cleanups
315cbdd3 lib: Don't hardcode year in sample symver section
76e4833d devel: Fix symbol versioning number
82392e3f Merge pull request #3095 from alexlarsson/fix-post-copy-symlinks
acb88600 Fix admin post-copy handling of symlinks
508443f7 Merge pull request #3094 from alexlarsson/admin-deploy-post-copy
accb1f06 Add `ostree admin post-copy` command
29973774 Merge pull request #3091 from cgwalters/fix-soup3
bc62fd51 unlock: Don't pass options again to overlayfs
331bc17e Merge pull request #3093 from cgwalters/rust-alias-stateroot
c668a8c5 tests: Work around systemd regression for boot id parsing
3535b58f rust: Add a `stateroot()` alias in the Rust bindings
ce2a33e8 build-sys: Enable libsoup3 by default if installed
2c774deb Merge pull request #3089 from cgwalters/fix-undeploy-parsing
c3cf5b23 undeploy: Parse integer more properly
e4b82c4a Merge pull request #3080 from nikita-dubrovskii/s390x_secure_boot
c3a9a642 lib/bootloader-zipl: Check for Secure Boot before zipl
67ccf6e0 Merge pull request #3085 from cgwalters/s390x-units
75c7e51a bootloader/zipl: No-op if run as non-root
cfb63b89 Merge pull request #3083 from cgwalters/release
36d96931 configure: post-release version bump
Signed-off-by: Jose Quaresma <jose.quaresma@foundries.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
dab8051f Release 2023.6
bd91fda6 Merge pull request #3010 from cgwalters/more-composefs-fixes
3648c5ae build-sys: Really fix composefs check
db3b286d Merge pull request #3009 from cgwalters/c9s-ci
bcd4d026 Merge pull request #3007 from cgwalters/optin-new-bootloader-naming
33ef4ae6 build-sys: Look for both linux/mount.h and sys/mount.h
bd8339bd ci: Add c9s build
cbe36c3a Merge pull request #3008 from ostreedev/maybe_ostree
29423a89 prepare-root: If composefs is configured as "maybe" don't fail
02d41907 deploy: Add bootloader-naming-2 opt-init
fb06d59e Merge pull request #3003 from cgwalters/prepare-root-oscore-and-units
20b8cb17 Move prepare-root karg helpers into otcore, add unit tests
44519492 Merge pull request #2997 from cgwalters/test-cleanups-1
37f247da Merge pull request #2999 from cgwalters/add-oscore-units
aa8ad204 Merge pull request #3001 from cgwalters/misc-c99-style-4
75a43deb cmd/grub2-generate: Port to C99 style
767ca134 cmd/init: Port to C99 style
e3ef72ea Merge pull request #3000 from cgwalters/test-inst-update
6eeb8b56 Merge pull request #2995 from ostreedev/dependabot/submodules/composefs-1aed878
e751dd9a Merge pull request #2998 from cgwalters/disable-composefs-too-old
facb9a1a tests/inst: Update to latest ostree-ext
7c82340d Merge pull request #2975 from ostreedev/androidboot-single-slot-mode
e3f0c4d4 tests: Add otcore unit tests
90e54619 build-sys: Disable composefs on too-old Linux headers
6e9e50d8 prepare-root: Changes made to find_proc_cmdline_key
650a0537 prepare-root: On a non-A/B androidboot system, boot system slot a
16b97d8a Merge pull request #2996 from cgwalters/misc-c99-style-3
578c87e7 tests/destructive: Port more to xshell
8f302f2a cli/set-origin: Port to C99 style
69d7d837 build(deps): bump composefs from `a6e827d` to `1aed878`
ee1e585e Merge pull request #2993 from cgwalters/misc-c99-style-2
22b47781 checkout: Port to C99 style
f7786e75 Merge pull request #2990 from cgwalters/init-is-stateroot
27266f90 lzma: Port to C99 style
722fc2d0 Merge pull request #2991 from cgwalters/misc-c99-style
9f39f78e remote-add: Port to c99 style
9036c96a admin: Port to c99 style
f4e56b91 admin-deploy: Add `--stateroot` as alias for `--os`
9d5ccfef Add `ostree admin stateroot-init` as alias for `os-init`
9ac938c4 Merge pull request #2989 from cgwalters/lock-timeout-longer
f4b42049 Merge pull request #2973 from ostreedev/dependabot/submodules/composefs-a6e827d
e88ec69e repo: Bump lock timeout to 5 minutes
55121cc4 Merge pull request #2988 from cgwalters/prepare-root-binding-key
d648eea6 Merge pull request #2987 from cgwalters/prefix-stage-deploy
94cb37cb prepare-root: Minor clarifications
25a458b9 deploy: Add some error prefixing
8712a467 Merge pull request #2985 from cgwalters/cleanup-proc-cmdline
083bad8c Merge pull request #2984 from alexlarsson/prepare-root-no-raw-key
28aed49d switchroot,generator: Only read /proc/cmdline once
0a79b3b1 prepare-root: Only support base64 formated public key files
c94388f3 Merge pull request #2980 from cgwalters/prepare-root-minor
871d32a5 prepare-root: Use ptrarray, not linked list
678bfcd9 prepare-root: Check for empty string, not strlen > 0
bea5d897 prepare-root: Use declare-and-initialize
3620d3c7 Merge pull request #2979 from cgwalters/enabled-discussions
d324f684 Merge pull request #2974 from alexlarsson/composefs-config-file
f1c1f819 README.md: Drop dead mailing list, link to GH discussions
81fa2141 Read composefs configuration from initrd instead of commandline
2cc6b531 Merge pull request #2966 from cgwalters/ostree-admin-edit
b108e24c build(deps): bump composefs from `1704f82` to `a6e827d`
c57c0056 Merge pull request #2958 from cgwalters/deploy-loosen-etc-usretc
7f70614a Merge pull request #2969 from cgwalters/fix-sync-pthreads
a31f7798 Merge pull request #2967 from cgwalters/drop-trivial-httpd-entrypoint
402e0428 deploy: Fix mutex locking for global sync timeout
60b46556 More fully drop `trivial-httpd` entrypoint
3cd3251a Add `admin set-default`
09160c1a Merge pull request #2962 from cgwalters/os-init-remount
ac42e29d os-init: Create a mount namespace
113e575e Merge pull request #2963 from cgwalters/more-gfileinfo-fix
15cb0b47 composefs: Only call `_get_symlink_target()` on symlinks
f44909f8 Merge pull request #2960 from ostreedev/dependabot/submodules/libglnx-c02eb59
a16a14a6 build(deps): bump libglnx from `07e3e49` to `c02eb59`
fd968d59 Merge pull request #2957 from cgwalters/transaction-test-suppress-global-sync
0406fd39 deploy: Support an empty `/etc` and populated `/usr/etc`
6470429b tests/destructive: Turn off global sync()
a2663e80 Merge pull request #2956 from cgwalters/finalize-more-verbose
3d881fee deploy: Be way more verbose about what we're doing
1aed5d7c Merge pull request #2954 from cgwalters/harden-gvariant-get-data
5b372596 checksum-utils: Add an assertion that `buf != NULL`
0392b546 core, switchroot: Harden a bit against `g_variant_get_data() == NULL`
d7d66121 Merge pull request #2953 from samcday/patch-1
66e42553 Merge pull request #2930 from cgwalters/prepare-root-config3
b5397887 docs: update boot loader spec link
af52a88d Merge pull request #2952 from cgwalters/silence-variant-lookup
13e7ae90 tree-wide: Consistently `(void)g_variant_lookup()`
34656260 prepare-root: Don't parse target root when composefs enabled
83d37d6d prepare-root: Default sysroot.readonly=true if composefs
22b8e4f9 prepare-root: Introduce `ostree/prepare-root.conf`
250c40a6 Merge pull request #2948 from cgwalters/composefs-more-cleanups
3f594b04 Merge pull request #2951 from cgwalters/errprefix-sysroot
5e2eedee Merge pull request #2949 from cgwalters/kargs-cleanup
cf525ee6 repo: Clarify when we fail to parse a remote
70d790ab sysroot: Add a bit more error prefixing
82da0e16 Merge pull request #2950 from cgwalters/generator-cleanup
d7fe9e54 kernel-args: Move private functions out of public header
303e7eb2 src/generator: Move all logic into libostree-1.so
ec1109c7 generator: Stop creating `/run/ostree-booted`
64afbcde composefs: Use lowerdir in /run
4c0e5b1e Merge pull request #2942 from ostreedev/android-bootloader-parsing
a035c2e2 Merge pull request #2946 from cgwalters/add-inode-fix-feature
8ce7bbe1 Add an always-on `inode64` feature
c89baaed bootloader: fold all Android Bootloader specific logic into prepare-root
55936165 Merge pull request #2943 from cgwalters/mount-cleanup
253e7758 Merge pull request #2944 from cgwalters/prepare-root-more-cleanup
e61226a8 prepare-root: Drop more dead code
41cda3bd prepare-root: Drop code mounting `/proc`
b258375f Merge pull request #2938 from cgwalters/dedup-ostree-parsing
b548ff74 Merge pull request #2939 from cgwalters/ed25519-cleanups
6966979c generator: Deduplicate ostree= karg parsing
fc303da6 sign-ed25519: Don't set sk unless we've validated it
3a18a557 sign-ed25519: Add some comments for data structure
fb40e559 sign-ed25519: More verbose errors for invalid length
1a2fac37 tests: Remove dead references to "SEED"
1c0fd7d4 Merge pull request #2937 from ericcurtin/ostree2androidboot.slot_suffix
355cd727 Remove steal_pointer and steal_pointer_impl as we link in glib now
a6f0a571 android-boot: Remove dependency on ostree= karg, use androidboot.slot_suffix=
27a9fe30 Merge pull request #2936 from cgwalters/sign-from-file
7bbe13ca Merge pull request #2931 from cgwalters/prepare-root-man
de81a7e7 Merge pull request #2929 from cgwalters/prepare-root-drop-pivot
8302a8ad Merge pull request #2927 from cgwalters/sysroot-errprefix-bootlinks
845d68d1 Merge pull request #2935 from cgwalters/prepare-root-config4
82d93491 commit: Add `--sign-from-file`
d4ca834b prepare-root: Refactor composefs config handling
18d6f597 Merge pull request #2934 from cgwalters/enable-composefs-default
592351d1 build-sys: Enable composefs at *build time* by default
3d29f89c Merge pull request #2928 from cgwalters/prepare-root-config
c1ac6bc3 Merge pull request #2932 from cgwalters/aboot-fix-nullderef
c078e8be mount: Fix gcc -fanalyzer warning for parsing androidboot.slot_suffix
c4f1d18a Merge pull request #2920 from ostreedev/dependabot/submodules/composefs-1704f82
1e4cb30c man: Add ostree-prepare-root
0eda15ce Use /run/ostree-booted metadata for sysroot-ro state passing
79806a68 prepare-root: Drop dead `pivot_root` code
b8d66964 remount: Use new metadata in `/run/ostree-booted` for composefs
77acad24 remount: Don't overwrite /run/ostree-booted
93699cc5 prepare-root: Add metadata for composefs to `/run/ostree-booted`
bafb5512 prepare-root: Use constant for ed25519 signature
6cdc5ce5 Merge pull request #2926 from cgwalters/otcore-cfs-constants
6769d66d sysroot: Add some error prefixing for bootversion
18cc4472 prepare-root: Drop unused verity flag querying
2b738a99 prepare-root: Use otutil and g_print
1b7b4fbd Add an internal constant for the composefs image name
c0c2c9bd Merge pull request #2924 from cgwalters/drop-syntax-check
65912106 build: Drop `make syntax-check`
57fe33f0 Merge pull request #2921 from alexlarsson/composefs-sign-v2
c29f4193 ostree-prepare-root: Validate ed25519 signatures when requested
b8ff2109 Factor out a libotcore
265cf7d7 build-sys: Add libsodium to OT_DEP_CRYPTO
a6d9c714 Merge pull request #2922 from alexlarsson/openssl-ed25519
744967a6 libotutil: Link to crypto libs
474c2b10 CI: Enable --with-crypto=openssl on debian testing to test openssl signatures
7b85adfb sign-ed25519: Implement sign and verify using openssl
501575c1 sign-ed25519: Drop some uses of libsodium
5b727751 Merge pull request #2923 from alexlarsson/fix-composefs-test
62e4f376 tests: Fix composefs test
eb011120 show: Add --print-hex
6056ec13 Merge pull request #2913 from cgwalters/tmpfile-not-on-revokefs
8a4a0c16 build(deps): bump composefs from `ac729b5` to `1704f82`
43fb2787 Merge pull request #2918 from ostreedev/dependabot/submodules/composefs-ac729b5
25120bd7 Merge pull request #2912 from cgwalters/itest-transactionality-debug
61720180 Merge pull request #1633 from cgwalters/pkglibexec-tests
ba9c9ded fetcher: Always open tmpfiles in repo (except on FUSE)
9104c54f Merge pull request #2905 from cgwalters/prepare-root-static-split
01be14e6 build(deps): bump composefs from `412cb5e` to `ac729b5`
0c36e814 Drop "ostree trivial-httpd" CLI, move to tests directory
8ad8a79c Merge pull request #2916 from cgwalters/release
b2cfee72 Merge pull request #2914 from cgwalters/doc-usergroups
5aadb6ec configure: post-release version bump
875915f6 prepare-root: Link to glib
d6799ecc Separate prepare-root static path
786e64ce docs: Update user and group section
8bba482b tests: Enable mtime test
0b519c25 tests: Drop unused alias
54c73155 tests/transactionality: Port a bit to xshell
Signed-off-by: Jose Quaresma <jose.quaresma@foundries.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
ostree-ptest rdepends on strace which is not compatible with riscv32. So
when ptest is enabled, set ostree not compatible with riscv32.
Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
libsoup3 is now supported by ostree, add `soup2` to select the
deprecated libsoup2 library and `soup3` for libsoup3.
Drop `--disable-glibtest` from PACKAGECONFIG as it does nothing (nor
does it appear to have ever done anything).
Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
==========
configure: post-release version bump
treegen: Require at least one mutation
ci: Turn off errors for deprecated-declarations
ci: Drop workaround for fedora-release-container
rust: Bump MSRV to 1.64
build-sys: Squash automake conditional warning re '.PHONY'
Add clang formatting infrastructure
lib: clang-format 'ostree.h'
tree-wide: Fix various include ordering issues
lib: Fix one include
clang-format: Don't align backslashes
tree-wide: Run clang-format
ci: Validate clang-format
tests/inst: Add xshell and use it in one place
tests: Ensure real GIO backends aren't used
ci: Add test configuration with soup3
fetcher/soup3: Rewrite without threads
fetcher: add libsoup3 backend
lib/sysroot-cleanup: Convert bootdir listing to dfd-relative
lib/sysroot-cleanup: Make some static utility functions global
lib/sysroot-cleanup: Drop dead code
lib/sysroot-cleanup: Factor out bootfs cleanup
lib/sysroot-cleanup: Make bootfs cleanup function global
libotutil: add utility functions for calculating directory size
lib/sysroot-deploy: Nuke 'finalize-failure.stamp' on successful finalization
tests/kola: delete unused .gitignore
tests/kolainst: Add 'make localinstall'
lib/sysroot-deploy: Add experimental support for automatic early prune
configure: post-release version bump
lib/fetcher: Add some debugging messages to the libsoup request path
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
==========
Add 'sysroot.bootprefix' option
deploy: Use 'semodule --refresh' if available
configure: post-release version bump
Release rust/ bindings 0.17.1
rust-bindings: Regenerate for 2023.1
rust-bindings: 'Sysroot' is 'Send'
itest-pull-space: Use mkfs.ext4, align to at least 512b
tests: Set size on fileinfo
Enable 'trust_return_value_nullability'
Add docs and fix annotations for ostree-repo-file.c
rust: Bump semver
lib: Fix two nullable annotations
repo: Fix nullability for remote options
rust: Renerate bindings
Revert "repo: Fix nullability for remote options"
rust-bindings: Regenerate
configure: post-release version bump
build: Do not include private headers in the introspection
libostree: Ignore new_and_connect in the introspection
libostree: Enhance the annotation coverage
core: Ensure glib standard::size attribute is always set
ci: update for new kolaTestIso()
lib/fetcher-util: Wake up main context when a request is complete
Increase buffer size for create_regular_tmpfile_linkable_with_content
tests: Ensure non-root users have access to libcap tools
ostree_raw_file_to_content_stream: Make size default to 0
_ostree_zlib_file_header_new: Default size to 0
write_content_object: Don't assume file info has standard::size
Use g_steal_fd() in preference to glnx_steal_fd()
docs: Use upstream theme & update to 0.4.1
build(deps): bump libglnx from '4e44fd9' to '07e3e49'
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Drop upstreamed patches, switch to github-releases for upstream checks,
update comments regarding making ptest pass as C.UTF-8 is default in
glibc now.
Alex Kiernan (2):
lib/repo-checkout: Add ALLPERMS for musl
tests: Handle musl's ERANGE mapping
Benno Rice (1):
Replace the radix64 crate with base64
Colin Walters (5):
fetcher: Avoid too large queues for metadata processing
configure: post-release version bump
rust: Bump to 0.17
bindings: Consistently check for `dox` feature
Release 2023.1
Dan Nicholson (16):
tests/inst: Update hyper-staticfile to 0.9.4
Strip trailing whitespace on all C files
repo: Add API to regenerate and sign repo metadata
bin/summary: Use ostree_repo_regenerate_metadata
commit: Allow skipping automatic summary generation
repo: Create metadata commit in ostree_repo_regenerate_metadata
lib: Provide internal summary signing with separate directory
repo: Prevent publishing summary without matching signature
bin: Cleanup documentation of --cache-dir option
bin/refs: Sort listing
bin/refs: Add option to print revisions
bin/remote-refs: Add option to print revisions
bin/show: Add options to list metadata keys
ostree/dump: Add support for summary metadata keys
bin/summary: Add options to show metadata
bin/remote-summary: Add options to show metadata
Eric Curtin (1):
bootloader: Add an aboot (Android) bootloader backend
Jonathan Lebon (1):
ostree/prune: Calculate reachability under exclusive lock
Luca BRUNO (4):
lib: assert more invariants
configure: use pkg-config with newer gpgme and gpg-error
lib/repo: fix an 'unused-function' warning
lib/sysroot-upgrader: add some 'nullable' annotations
Tareque Md Hanif (1):
docs: Fix link to ostree-rs
Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
The comments and recipe had diverged, bring them back into line. Update
the instructions on how to get ptest to pass.
Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Convert to tarballs which are now being published. Drop backported
fixes, drop s390 bash patch (done differently upstream), drop glibc 2.36
sys/mount fix (done differently upstream), add patch for musl and
ALLPERMS.
v2022.7
(Some of these commits are actually only for the Rust bindings;
will try to enhance the release flow to more clearly filter
those out)
On the feature front, there's new APIs for idempotent delete operations on
kernel arguments, and for handling unshare() to
manipulate (otherwise) read-only sysroot.
A few very small memory leak fixes.
Many people will be happy that we now retry HTTP requests after
receiving HTTP 500 errors.
There's a notable bugfix avoiding rebuilding SELinux policy
when creating a first deployment.
Thanks to all contributors!
Colin Walters (18):
Remove readdir-rand
deploy: Don't rebuild selinux policy on first deployment
ci: Bump memory for ISO testing flow
rust: Update to cap-std 1.0
rust: Drop `openat` dependency
ci: Fix case where cosa != buildroot
rust: Update to gio 0.16
repo: Avoid potential double unwind when writing panic value
Allow missing docs on two `glib::wrapper` functions
sysroot: Add an API to initialize with mountns
rust: Regenerate with latest gir and C sources
tests/inst: Update to latest ostree-ext
tests/inst: Drop nix dependency
tests/inst: Update cap-std-ext to 1.0
tests/inst: Update sh-inline
tests: Require OSTREE_TEST_SUDO to be set to use `sudo`
ci: Add a flow that combines C build and Rust integration tests
Release 2022.7
Jonathan Lebon (4):
ci: Bump memory request, use fcosKolaTestIso
ci: Drop unnecessary outer stage
ci: Use new names for custom kola steps
ci: bump cosaPod memory requirement to 5Gi
Luca BRUNO (20):
configure: post-release version bump
lib/repo-checkout: fix typo in error message
lib/bootloader-zipl: check for errors when opening initrd
lib/static-delta: document and check parameters format
rust/tests: fix static delta generation testcase
lib/sign-ed25519: convert invariant checks to assertions
rust: regenerate bindings after latest release (2022.6)
ostree: manually patch generated files
rust: update manual helpers
ci/rust: bump linting toolchain to latest stable (1.64)
lib/repo-refs: properly return an error value
rust: update pinned gir tool to 0.15
rust/ostree-sys: regenerate for gtk-rs 0.15
rust/ostree: regenerate for gtk-rs 0.15
ci/rust: test from git using latest feature
cargo: prepare ostree 0.16.0 and ostree-sys 0.11.0
copr: only use libostree tags
ci: adjust git tags filtering
cargo: bump minimum Rust version to 1.63
ostree: manually patch generated files
Manuel Stühn (1):
Add test for generating static delta to file
Philip Withnall (4):
ot-builtin-commit: Fix a typo in a command line help string
ot-builtin-commit: Don’t mention a C function name in a help string
lib/pull: Fix a small leak when a variable is reused
ot-builtin-pull: Fix a minor leak with progress reporting
Rafael Garcia Ruiz (2):
ostree_kernel_args_contains for OstreeKernelArgs
Idempotent delete operation for OstreeKernelArgs
Ricardo Noriega (2):
Enabling retry for HTTP 500 internal server error
Add tests for cases under random 500s
Simon McVittie (2):
readdir-rand: Copy full size of struct dirent
Replace calls to g_memdup() with g_memdup2()
dependabot[bot] (2):
build(deps): bump libglnx from `26375b5` to `e701578`
build(deps): bump libglnx from `e701578` to `4e44fd9`
2022.6
This release contains a collection of bugfixes and enhancements. Notable
fixes concern finalize-staged, which should now better support
automounted partitions and skip waiting for termination signal.
A file descriptor leak has been fixed in the commit logic. The codebase
has also been fixed to avoid conflicting declarations when building with
latest glibc (>= 2.36). Thanks @GeorgesStavracas for both fixes!
On the feature side, there is now basic support for handling overlayfs
whiteouts on checkout through a new --process-passthrough-whiteouts
flag. This is useful for users that need to carry container storage
embedded into ostree commits. Thanks @mangelajo for that!
The ostree rev-parse command gained a new --single flag to better
support repositories containing exactly one commit. Overall, the s390x
Secure Execution (SE) logic has been reworked to stop relying on glue
scripts.
Thanks to all contributors!
Andrea Perotti (1):
Fix recursive git archive reference
Colin Walters (12):
configure: post-release version bump
rust-bindings: Fix `cargo fmt`
deny.toml: Add `Unicode-DFS-2016`
Remove unused `linux/fs.h` includes
Move FIFREEZE/FITHAW ioctl invocations into linuxfsutil.c
cli/rev-parse: Port to new code style
cli/rev-parse: Add `--single` option
rust: Update to latest git
ci: Also drop seccomp on debian testing
rust: Bind `ostree_repo_list_commits_starting_with`
finalize-staged: Don't listen to `SIGTERM`, just let kernel exit us
README.md: Link otto
Dan Nicholson (3):
main: Factor out sysroot loading
finalize-staged: Ensure /boot automount doesn't expire
lib/pull: Fix max-metadata-size documentation
Georges Basile Stavracas Neto (1):
lib/commit: Unref repo on success
Huijing Hei (1):
Fix `ostree admin kargs edit-in-place` assertion when deployments are pending
Jon Oster (1):
docs: Add aktualizr and TorizonCore to related projects
Jonathan Lebon (3):
lib/commit: Directly use FICLONE for payload link
tests/kolainst/staged-deploy: parse `rpm-ostree status --json` instead
docs: Add section about staged deployments
Luca BRUNO (7):
libostree: fix a typo in annotation
lib/bootloader: assert invariants
lib/mtree: drop redundant name checks
otutil: add error handling to variant builders
lib/sign: convert invariant checks to assertions
lib/repo: properly initialize boolean variable
lib/sysroot-deploy: explicitly handle `g_variant_lookup` results
Lukas Kalbertodt (1):
Update to `libtest-mimic` 0.5.0
Miguel Angel Ajo (1):
Support overlayfs whiteouts on checkout
Nikita Dubrovskii (3):
s390x: ensure both 'root' and 'boot' luks keys exist
s390x: simplify 's390x-se-luks-gencpio' script
s390x: use 'libarchive' to modify initrd in SE case
Sam James (1):
buildutil/glibtests.m4: fix bashism
dependabot[bot] (1):
build(deps): bump libglnx from `c59eb27` to `26375b5`
git-bruh (1):
ostree-fetcher-curl: check for HTTP2 support before trying to use it
Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Backport a patch to fix selinux policy rebuild error on first
deployment.
See: https://github.com/ostreedev/ostree/issues/2758
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Since 2022.3, ostree has a runtime dependency on bubblewrap when enable
selinux feature[1].
[1] edb4f38934
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Add ed25519-libsodium to PACKAGECONFIG, mark glib/gnutls/openssl as
mutual conflicts.
Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
==========
2022.02:
lib/util: add syslog.h for ot_journal_print()
lib/bootloader: use ot_journal_print() instead of sd-journal
main: Also support CLI extensions in '/usr/libexec/libostree/ext'
sysroot: Add a public '#define OSTREE_PATH_BOOTED'
deploy: Add a 5s max timeout on global filesystem 'sync()'
deploy: Also log to journal if we time out global sync()
core: Mark 'ostree_create_directory_metadata' as '(not nullable)'
lib/tar: Add some error prefixing
build-sys: Drop '-Werror=aggregate-return'
mtree: Use declare-and-initialize style
mtree: Load traversed subdirs when creating parents
Release 2022.2
configure: post-release version bump
github: Workaround glib/seccomp issue on Ubuntu impish
lib/repo: Add commit version metadata to summary metadata
.lgtm.yml: Fix gpgme dependency
lib/deploy: When deleting staged deployment, delete any lock
ostree/deploy: Test finalization locking
tests/kolainst: Avoid recursive symlinks
ci/libbuild.sh: drop yum/CentOS support
ci/make-git-snapshot.sh: fix archive name
ci/make-git-snapshot.sh: auto-initialize submodules
ci/make-git-snapshot.sh: xz the archive
Add COPR integration Makefile
lib/gpg-verify-result: Add missing floating annotation
configure: post-release version bump
libotutil: avoid leaking builder memory on error
ostree: check g_setenv return value
libostree/sepolicy: get rid of a g_setenv() call
lib/commit: always validate metadata
lib/commit: reject empty metadata keys
builtin: use GCancellable and GError everywhere
lib/repo: open file only if required
lib/commit: clean up assertions
lib/core: introduce two new object types for split xattrs
lib/core: introduce 'bare-split-xattrs' mode
lib/repo: read split xattrs content from file-xattrs-link objects
lib/commit: disallow writing content in 'bare-split-xattrs' mode
tests/basic-bare-split-xattrs: add fixture, check read logic
man: Fix typo in ostree-admin-switch
man: Fix typo in ostree-find-remotes
s390x: add "IBM Secure Execution for Linux" support
s390x: add LUKS keyfile to 'sd-boot'
Fix marking static delta commits as partial
lib/repo-refs: Remove misleading newline
src/ostree: Add --commit-only option to ostree prune
man/prune, bash: Add --commit-only flag for ostree prune
tests/test-prune.sh: expand testing for --commit-only
tests/test-prune.sh: Use TAP API
libotutil: Avoid infinite recursion during error unwinding
Update submodule: libglnx
build(deps): bump libglnx from '803adaf' to '88da8dd'
build(deps): bump libglnx from '88da8dd' to 'c71f7ae'
2022.01:
repo: Change locking for summary regeneration to be shared
soup-uri: Fix clang-analyzer warning by dropping dead code
tests: Fix clang-analyzer not seeing through `g_error()`
Update FSF license notices to use URL instead of address
lib: misc static analysis fixes
lib/repo: assert that writable state and error agree
lib/repo: do no return an arbitrary mode on failure
lib/repo: do no return a NULL on failure
tests: assert mandatory values are present
main: add support for CLI extensions via external binaries
tests/cli-extensions: tweak test logic
lib: use ostree-content-writer header
bsdiff: bump submodule, pick up fix for CVE-2014-9862
lib/static-delta: throw a proper error on bspatch failure
github: add dependabot config
rofiles-fuse: Build using FUSE 3 if possible, falling back to FUSE 2
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
While DEBUG_BUILD = "1" in local.conf, `-Og' is added to cfalgs by Yocto,
it broke ostree build with `-Werror=aggregate-return' (the
-Werror=aggregate-return is added by ostree configure.ac)
So remove -Og and use -O2 as workaround
Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
# Changed in V2: s/$OECORE_NATIVE_SYSROOT/\$OECORE_NATIVE_SYSROOT/ for
# ostree wrapper of nativesdk
Refer the impment of native, use the same PACKAGECONFIG, EXTRA_OECONF
and similar create_wrapper for ostree
Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
This is a bugfix release.
Most of the fixes are related to warnings highlighted by gcc -fanalyzer static
source analysis.
Performance of pruning logic has been improved, avoiding unnecessary trips
through redundant serialization (#2484).
A regression has been fixed so that ostree is properly behaving again when
used from the initramfs, at a point where /sysroot may not be mounted yet (#2486).
A race condition related to sysroot.readonly has been addressed by directly
setting up sysroot readonly in initramfs (#2187).
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This patch updates SRC_URIs using git to include branch=master if no branch is set
and also to use protocol=https for github urls as generated by the conversion script
in OE-Core.
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This is the result of automated script (0.9.1) conversion:
oe-core/scripts/contrib/convert-overrides.py .
converting the metadata to use ":" as the override character instead of "_".
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Changelog:
This release adds new repository-locking methods to the API,
in order to make lock handling more granular and better suited
for multi-threaded consumers of the library.
Several bugs have been fixed related to service unit ordering
and enablement.
Pulling from remotes with unknown schemes now produces more
friendly error messages.
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
