v0.8.0

Changes

New Features

unseal: Retry `tpm2_unseal` when a PCR changes during unseal 7031d4e

• Add Retry<T> with Attempt trait and RetryOptions (5 attempts, 50ms initial delay, 2.0 multiplier)
• Attach attempts and is_retryable to the final error
• Split UnsealError into PcrChanged and Failed; only PcrChanged is retryable
• Fix code parsing matching Esys_Unseal() on an earlier stderr line and returning an empty code
• Remove the retry hint now that the retry is automatic
• Resolve Retry<dyn Unseal> in GetKeyAdapter via DI

Closes: #12

Bug Fixes

unseal: Attach error code and PCR retry hint to errors f867cb3

• Parse the Esys_Unseal return code from stderr and attach it as code
• Attach a retry hint when the code is TPM_RC_PCR_CHANGED (0x128)

service: Match SELinux rules under both `/home` and `/var/home` a8594a9

• Write file specs as /(var/)?home/… so one rule survives either direction of the Fedora Atomic /var/home equivalency
• Drop BREW_PREFIX_REAL; readlink -f produced the form a later policy update aliased away, leaving rules that matched nothing while restorecon stamped default_t back on every service start
• Drop the -a … 2>/dev/null || -m fallback so semanage errors surface; semanage already falls back to modify and exits 0
• Correct user_home_t to the observed default_t

Dependencies

Upgrade dependencies and remove unused serial_test 086a75c

Tests

Attach path to `TempDirectory::create` errors 042fd82

• Return Report<TempDirectoryError> NOT io::Error so failures name the directory
• Os { code: 13, kind: PermissionDenied, message: "Permission denied" } gave the cause but never the path