Skip to content

2022.3

Compare
Choose a tag to compare
@cgwalters cgwalters released this 04 May 19:07
· 1640 commits to main since this release
v2022.3

A big patch landed to update our baseline GLib requirement to 2.66
(in preparation for a libsoup update, which is also coming). Thanks
so much to Daniel Kolesa!

Various test suite improvements and documentation improvements;
we now publish man pages! Thanks Dan Nicholson.

How to use Linux IMA with ostree is now documented - this
I think is a key point in helping "bridge" between the original
goal of ostree being a "flexible" Linux system with the stronger
security guarantees of other systems that use e.g. dm-verity.
More to come here!

A few static analyzer fixes (nothing critical). Some improvements
to the test suite.

As far as bugfixes, there's a notable one to the OstreeRepoAutoTransaction
refcounting that showed up in valgrind.

And last but not least, we finally closed a longstanding conflict
between ostree and per-machine SELinux policy customizations; ostree
learned how to use bubblewrap to create a container targeting
the pending deployment to re-build the policy if necessary.

Thanks so much to all contributors!

Colin Walters (17):
      configure: post-release version bump
      tmpfiles: Create `/run/ostree`
      tests: Stop using inventory crate
      Update to nix 0.23
      Update to ostree-ext 0.6
      Update to rand 0.8
      ci: Disable Ubuntu LTS
      ci: Update docs workflow to use fcos-buildroot
      Update to sh-inline 0.2
      deploy: Be a bit more verbose about SELinux bits
      libarchive: Handle `archive_entry_symlink()` returning NULL
      fetcher/curl: Consistently check return value `curl_easy_setopt`
      ci: Mask zincati for synthetic update
      docs: Add new IMA document
      Update docs/ima.md
      Add an `ostree-boot-complete.service` to propagate staging failures
      Release 2022.3

Damiano Donati (1):
      README.md: update ostree-rs language binding link

Dan Nicholson (5):
      man: Remove unnecessary nbsp's from ostree man page
      man: Allow building HTML man pages
      man: Use custom XSL stylesheet for HTML output
      man: Create an HTML index
      docs: Publish man pages

Daniel Kolesa (1):
      glib: bump glib requirement to 2.66 and port to GUri

Jan Tojnar (1):
      tests/test-cli-extensions: Fix with single-binary coreutils

Joe Talbott (1):
      Add Fedora Kinoite link to index.md also.

Luca BRUNO (2):
      apidoc: add missing page includes
      tests: move fixture to fix installed tests

Ondrej Mosnacek (1):
      deploy: Try to rebuild policy in new deployment if needed

Philip Withnall (1):
      ostree-repo-pull: Take correct out path on error

Simon McVittie (5):
      s390x-se-luks-gencpio: Fix shebang syntax
      s390x-se-luks-gencpio: Use interoperable path for bash
      test-prune: Read to the end of cut(1) output
      repo: Factor out _ostree_repo_auto_transaction_new()
      repo: Correctly initialize refcount of temporary transaction


Git-EVTag-v0-SHA512: 1e1ef032836c9b65dcd4de8140e4b742e73b87432c7ffa47cc7cc47e95a74680ff03f872295f8e4af316869ceabcfb74a65ec447bf005998ad1a2220fc5bbfbb
-----BEGIN PGP SIGNATURE-----

iQFHBAABCgAxFiEEq5KKnPjdBikJw3u93EX9WSHBPwsFAmJyzoYTHHdhbHRlcnNA
dmVyYnVtLm9yZwAKCRDcRf1ZIcE/C0f1B/9Zk7vSRF7HT+ErhcRmrFyTeC2bzl+C
D2lv4K4QLtwo2LgSm06GtztRIxqCGE+8g4G68VPqbh+BZ9i4HXaiI8bfIPQTCY2w
c2ITP81hdAZ23Ns8o/8qbF18usCVpjTyhzBHmgVbq+MSzsfjfjZE1yqxup2VYn1k
4T8UOQVJA2YR3TJkLLzsca1py8UkRkV9qfaTn6+VG6msuscUNrTHUkuc6kzsG6nd
Lsc8ijecusvyxpmwWHJ0LdBpBiC5mbzCdw2kIF10cl1XzNUI/2n2j26RmNx/RoW0
4Paib05G8o567PhawY653lPLP3+/SQ2HLVCQPoAv4lEL13yZ1QOVe2vO
=dt+M
-----END PGP SIGNATURE-----