v0.12.0

Major changes:

• Add high-level iso customize and pxe customize subcommands for flexibly customizing a live image
• install: Add --config-file to specify install options via a YAML config file
• systemd: Automatically install if config files exist in /etc/coreos/installer.d
• Add iso network and pxe network subcommands to embed NetworkManager configs in an ISO or wrap them in an initrd

Minor changes:

• Add iso reset subcommand to reset an ISO image to pristine state
• Differentiate -h and --help. --help will produce longer-form documentation, similar to a man page. Add long help to install and iso/pxe customize.
• pxe: Have ignition unwrap read from stdin if no filename specified
• pxe: Support ignition unwrap from concatenated initrds
• systemd: Print deprecation warning on coreos.inst=yes
• systemd: Print deprecation warning if coreos.inst.install_dev value omits /dev
• docs: Autogenerate subcommand pages from help text
• docs: Remove instructions for replacing coreos-installer.service, in favor of installer.d config files

Internal changes:

• Fix packing minimal ISO with hard-linked files
• bind-boot: Ignore ESPs not colocated with the boot filesystem
• rootmap: Properly handle linear RAID devices

Packaging changes:

• Add base64, ignition-config, serde_with, and serde_yaml dependencies
• Enable structopt wrap_help feature

SHA-256 digests:

• crate: 0ebee3b55c21a21980535fc46f68e3881d296beed98f9a3a506e40ec49e0af1d
• vendor: abe4e8084c9a073f5a4692c89c47113bd9bf87a664a4d05638e37294ab582b00

v0.11.0

Major changes:

• Drop Fedora 33 signing key
• iso: Add extract pxe subcommand to extract PXE artifacts from ISO
• iso: Add extract minimal-iso subcommand to extract netboot ISO image from ISO

Minor changes:

• download: Ignore --decompress for artifacts that are meant to be used compressed
• download: Report the selected artifacts before starting download
• download/install: Avoid printing GPG verification result when we're ignoring it
• install: Report automatically selected OS, architecture, platform when downloading install image
• install: Report if multiple filesystems are labeled boot
• iso: Find Ignition embed area by directly parsing ISO filesystem
• iso: Find kargs embed areas by directly reading kargs.json from ISO, if available
• Add -a short option for --architecture
• Enable optimization for xz code in dev builds to speed up testing
• Fix build on s390x
• docs: Avoid using privileged container for download subcommand

Internal changes:

• Add support for packing minimal ISO
• rdcore: Add bind-boot subcommand to bind root and boot filesystems on first boot
• rdcore: Add verify-unique-fs-label subcommand to check if multiple filesystems share a label
• kargs: Add --current to do a dry run on the booted kargs
• osmet: Drop support for RHCOS unencrypted LUKS container

Packaging changes:

• Include debug symbols in release builds
• Add bytes, structopt, and thiserror dependencies
• Drop clap dependency
• Require nix ≥ 0.22
• dracut: Install zipl_helper.device-mapper on s390x
• Update container to Fedora 35
• Use Fedora build of liblzma in container

SHA-256 digests:

• crate: a78f520ccafcd8852d804cf1d144070ef2534796dfdaf1c0b52c2c01eb111328
• vendor: a8daba638e2fbd48168652ef388091830977e0ee490108738d1516b7db4b3d30

v0.10.1

Security fixes:

• Fix GPG signature check when decompressing gzipped images (GHSA-3r3g-g73x-g593, CVE-2021-20319)

Major changes:

• Add Fedora 36 signing key

SHA-256 digests:

• crate: 58972c7d8710e3b433886c867eee2497e822f63d95bea2c623e6df40766dc965
• vendor: 216d7ecdc511e925d89843169f5c1329b1d6b86608b0fd0b3f2053d7f1ec4f70

v0.10.0

Major changes:

• install: Support IBM Z virtio DASD target devices
• install, download: Support retrying fetches with new --fetch-retries option

Minor changes:

• install: Restrict access permissions on /boot/ignition (GHSA-862g-9h5m-m3qv, CVE-2021-3917)
• install: Retry reading partition table on device mapper target devices
• systemd: Persist coreos.force_persist_ip kernel argument when installing with coreos.inst.*
• List subcommands of a command even without -h
• Mount filesystems in a separate mount namespace
• Refactor bootloader installation on s390x
• Enable optimization for gzip code in dev builds to speed up testing
• docs: Document coreos-installer iso kargs commands

Internal changes:

• kargs: Run zipl if necessary on s390x
• kargs: Don't fail --create-if-changed if the file already exists

Packaging changes:

• Require Rust ≥ 1.49.0
• Support OpenSSL 3.0

SHA-256 digests:

• crate: 069d2563743e985c77386f83a1b1af3ec3df43a60414ed612d727e82d397739a
• vendor: 7ebeb2f90ee3393004f95df83ddf71aeb01f100a921c327c43a7d5031c2b21f0

v0.9.1

Major changes:

• Add Fedora 35 signing key; drop Fedora 32 signing key

Minor changes:

• install: Fix block device path in error message when disk is busy
• install: Ignore corrupt GPT on target disk unless saving partitions

Internal changes:

• rootmap: Ignore multipath devices

SHA-256 digests:

• crate: 358e3f54fbf3f059ac80be2736167ef101c01a23fb1c483f72af168bb5204b54
• vendor: d448b3c13d21283fb9050ae79ddd906bece01cd9d3404ed4c0b8d2e904770ded

v0.9.0

Major changes:

• iso: Support writing output file to stdout with -o -

Minor changes:

• blockdev: Fix RHEL lsblk ordering bug by using --nodeps option
• blockdev: Strengthen device mapper path detection

Internal changes:

• osmet: Drop support for --real-rootdev option
• Add --override-options to rdcore kargs to make it easier to test kernel argument changes
• Optionally create a file if kernel arguments are modified
• Add declarative semantics for kernel argument modification

Packaging changes:

• Switch from error-chain to anyhow library

SHA-256 digests:

• crate: e08911879db60769558212173ddceef80d09476f41f5aa4dab907a8b466d9488
• vendor: d4ad0b55748c0114fda91c3f8c6c6ebcf4e61f0c228e722cadf5a56105622d9e

v0.8.0

Major changes:

• Add iso kargs subcommand for modifying kernel arguments in live ISO images
• Support IBM Z FBA DASD target devices

Minor changes:

• Fix race condition causing fdasd failure when formatting ECKD DASD
• Fix sector size selection on unformatted ECKD DASD

Internal changes:

• rdcore: Add kargs subcommand for modifying BLS configurations

Packaging changes:

• Add lazy_static dependency
• Add mbrman and rand dependencies on s390x
• Require regex ≥ 1.4

SHA-256 digests:

• crate: ede8235a603d1695fae4f0b056b83bebac30fa5ec63ffbbf67599586c5d3e5b7
• vendor: e91cce48e110fd83a7f419befc92ea075e2488f407b9768003fb78b15cb51817

coreos-installer v0.7.2

Major changes:

• Add Fedora 33 and 34 signing keys; drop Fedora 30 signing key

Minor changes:

• systemd: Start coreos-installer service after systemd-resolved

Packaging changes:

• Update container to Fedora 33

SHA-256 digests:

• crate: 8f57fb022ed12c0af4b8723677568838c74cc63621c08797abbff5df90930aa6
• vendor: 5d99f2fee4facbd63ad4bcd27e2261ac779117ee2b07b93cc95b8141ae33a9e9

coreos-installer v0.7.0

Minor changes:

• iso: Use filesystem copy-on-write mechanism for -o output file if available
• install: Remember to update MBR from install image when restoring saved partitions
• install: Update size of protective MBR partition when restoring saved partitions
• install: Clear MBR boot code on install failure
• install: Revert insufficient s390x segfault avoidance change
• docs: Restructure for web publishing
• docs: Add initial command-line reference

Internal changes:

• rootmap: Configure LUKS root to wait on network if needed

Packaging changes:

• Require openat-ext ≥ 0.1.4

SHA-256 digests:

• crate: 3ce99c03e503c37f98917744d3bb64a2dd7ff66a49122e55540ce006a76b01a5
• vendor: f9e08eb59dfe4d2acfe70727d8eef4309d867b58a05ebf06b9010d69b90b5069

coreos-installer v0.6.0

Major changes:

• Add pxe ignition subcommands to generate or show an Ignition config wrapped in an appendable initrd
• iso: Move iso subcommands to iso ignition and deprecate the former
• iso: Rename iso ignition embed -c/--config to -i/--ignition-file

Minor changes:

• install: Fix kernel ignoring saved partitions after install failure
• install: Fix loss of saved partitions if original partition table is invalid
• install: Retain saved partitions in partition table at all times during install
• install: Clear partition table on failure by writing empty GPT rather than zeroes, except on DASD
• install: Reread kernel partition table after restoring partitions on failure
• install: Make --preserve-on-error saved partition stash file the same size as the target disk
• install: Properly activate first-boot kernel arguments on s390x
• install: Avoid segfault due to miscompilation in s390x release build
• iso: Compress Ignition config with XZ to increase capacity
• systemd: Suppress reboot after failure of a hook unit
• Document hooking install via an Ignition config

Internal changes:

• rootmap: Fix failure on unmodified rootfs
• rootmap: Inject rootflags kernel argument

Packaging changes:

• Require gptman ≥ 0.7

SHA-256 digests:

• crate: 43e9657eec14a3d1d81eeed35140ff914204d5e911d6823ec4c3344b85ebdd20
• vendor: ae0d17ec9825a1eb712201d2c664787adc77c900b5fcbc010002c9f1047535ce