* get-timeout for sd-boot return unsigned value
* jeos-firstboot-enroll: drop unused variable
* jeos-firstboot-enroll: continue if no enrollment (bsc#1236583)
* jeos-firstboot-enroll: hide keyctl output
* jeos-firstboot-enroll: add title and description
OBS-URL: https://build.opensuse.org/package/show/devel:microos/sdbootutil?expand=0&rev=153
* Drop PCR2 if in virtual machine
* Add have_slot function
* Get boot time from /proc/stat (boo#1240851)
- Update to version 1+git20250404.f9b9576:
* Check free space early
* Add kernel version in title if grub2-bls
- Update to version 1+git20250404.20a1dfb:
* Limit 640 to 4 variations
* Fix get_default for grub2-bls
- Update to version 1+git20250403.0ae7eeb:
* Drop shifted variations before the new one
* Create loader.conf if missing
- Update to version 1+git20250401.2eda714:
* Shift only the matching component
* Rework free-space allocator algorithm
* Clarify when the initrd is generated
* Add the kernel version for measurement order
* Keep original prediction for pcrlock aligment
* Check array size for emptiness
* Refactor debug output
* Reclaim free space when updating entries
* spec: Update bootloader if it is recognized
* Limit variations up to 8 for a component
* Add priority field in entry list
* Make snapshot_ids ordered by importance
* Convert echo to info
* In virtual environment drop PCR0
- Update to version 1+git20250328.f1d4885:
* Fallback to file config when bootctl fails
* Remove TODO file
* Declare local variable
* Print colors when in terminal
* Do not load the config file when variable is set
* Uset btrfs instead of snapper for set default snapshot
* Drop unused entries parameter
* Improve boot loader detection
- Update to version 1+git20250327.9714cbd:
* Get boot_dst from os-release NAME
* Add --devices parameter
- Update to version 1+git20250324.c1cd393:
* Use filesystem order in grub2-bls
- Update to version 1+git20250311.8d3db8b:
* Load the config file when updating the predictions
* Include swap partitions for PCR15
* Soft fails keyctl setperm when called via YaST
* Revoke cryptenroll key if is incorrect
- Update to version 1+git20250307.d46fcde:
* Add fallback logic when generatic predictions
* Don't use sdbootutil-pin when reading vk
* Drop parameters for generate_tpm2_predictions
* Fix style
* Fix --signed-policy parameter
- Update to version 1+git20250306.0811984:
* Fix list of tracked devices
* Don't echo '\n' when timeout or default entry are empty
- Update to version 1+git20250305.278a563:
* Revert "Remove .conf suffix from grubenv (bsc#1237198)"
* Drop unused parentheses
* Fix name of local variable
- Update to version 1+git20250304.16b1e1b:
* Fix location of initial boot entries
* Set keyslot as local
* Style changes
- Update to version 1+git20250303.63ae770:
* Fix typo in comment
* Fix openssl -noout call
* Store the password in cryptenroll keyring
- Update to version 1+git20250303.11b90a2:
* Validate the ESP mount point
* Do not recurse when called from snapper
- Update to version 1+git20250227.9d0f768:
* Make set-default-snapshot consistend
- Update to version 1+git20250227.0f0a096:
* Fix typo in variable name
* Update help entries
* Fix wrong comparison
- Update to version 1+git20250227.da22e9b:
* Measure all boot entries in grub2-bls
* Drop wrong comment
* Validate set-default parameter
* Quiet openssl when gnerating RSA key
- Update to version 1+git20250225.b78f812:
* Use also cryptenroll key to recover the volume key
- Update to version 1+git20250225.292283f:
* Support UUID references in crypttab
- Update to version 1+git20250224.c9be3b6:
* Do not use && when copying signature (bsc#1237505)
- Update to version 1+git20250221.19f7d1a:
* Reformat the spec file
* Rework keyctl calls to keep the session keyring
- Update to version 1+git20250219.a796c24:
* generator: exit if /etc/crypttab is missing
* Fix measure-pcr-validator StandardOutput
- Update to version 1+git20250217.f216443:
* Remove .conf suffix from grubenv (bsc#1237198)
- Update to version 1+git20250214.ef3b642:
* Add banner reporting PCR 15 mismatch
* Generate PCR 15 predictions if crypttab changed
* Create predictions for PCR 15
* Add measure-pcr-validator service
* Order devices when FIDO2 keys are used
* Set BuildArch to noarch
* Add dracut measure-pcr module with generator
* Add tpm2-pcr-measure crypttab parameter
* Fix help indentation
- Update to version 1+git20250210.45458c4:
* Requires keyutils (bsc#1236940)
- Update to version 1+git20250130.2bcbf46:
* Recognize set-timeout -1 in systemd-boot (bsc#1236578)
* Drop unused parameters
* Remove interactive leftover
* Add bash completions
* Export options definition to function
* Export command definition to function
* Export bootctl evaluation to function
* export image name setting to function
* Remove UI command help
* Mount devices and subvolumes for chroot
* Set permission for new keys
* Regenerate initrd if missing
* Remove old initrd
* Accept spaces or tabs when parsing crypttab
* add info to --help about how to ignore devices
* Do not include command line parameters before initrd= and
BOOT_IMAGE= This is necessary because the kernel can inject
command line options that are placed in front of these
parameters. sdbootutil then picks these up on the next run and
causes duplication of them, as the kernel will again inject the
option. Now sdbootutil ignores these injected parameters.
* Do not fail if the parent is missing
* Drop extra echo
* Fix 'if' expression
* Fix enrollment method variable
* Drop unused variables for TUI
* Remove TUI components
* Add --removable as alias for --portable
* Show dracut output in verbose mode
* Make if-else case statement
* Add --pcr cli option
- Update to version 1+git20241217.5aeb4e9:
* Use only the first output line of findmount in free space calc
- Update to version 1+git20241217.1370153:
* Add trigger for grub2-bls
- Update to version 1+git20241206.dccea55:
* Fix quotes in bind mount command (bsc#1233378)
* Allow multiple entries for initial measurements
- Update to version 1+git20241126.83ebe2c:
* Fix help for get-timeout
* Add get default and timeout
* Replace -a with &&
* Drop PATH field
* sdbootutil-enroll: harden script against unexpected conditions
- Update to version 1+git20241118.23c1900:
* Fix missing grep file
* Detect new bootctl error message
* If BLI is not active use the loader.conf
- Update to version 1+git20241112.ecf5f97:
* Move enrollment from disk-encryption-tool
* Use [/usr]/etc/default/fde-tools as config file
- Update to version 1+git20241107.6f81ff3:
* Add list-devices command
* Ignore devices with x-sdbootutil.ignore mark
* Quote variable expansion
* Support empty crypttab options
- Update to version 1+git20241107.542aa84:
* Fix missing timeout parameter
- Update to version 1+git20241105.3404bf8:
* Do a cleanup before making free space
* Simplify unlock mechanism and recovery key enroll
* Drop generate-pin parameter
* Indentation and comments fix
* Measure grubenv
* Add set-default and set-timout commands
* rollback bootloader after setting default snapshot
* Improve error checking and fix small bugs
* Add --unlock argument
* Use unique names for the kernel keyring
* Add --generate-pin to generate a recovery PIN
* Enroll a new recovery key
* Bind mount snapshot dir onto itself before chroot.
- Update to version 1+git20241017.34ee974:
* Keep SELinux label of /etc/crypttab intact when changing options
(boo#1231696)
* Fix typo in update-entry help, should be /etc/kernel/cmdline
- Update to version 1+git20241008.3df16d2:
* Improve not found bootloader error msg
- Update to version 1+git20241007.192698c:
* Translate GRUB2 architecture name
- Update to version 1+git20241004.a1bb60f:
* Support bootloader switch
* Update order after bootloader install
* Use /etc/sysconfig/bootloader to untie detection
* Reference to grub2-bls
- Update to version 1+git20241002.7da4a47:
* Do not specify bootloader requirement
- Update to version 1+git20241002.7b8957c:
* Requires udev for bootctl
* Use chroot instead of --sysroot in dracut
* Replace cut with idiomatic code
* Show recovery PIN generated by systemd-pcrlock
- Update to version 1+git20240912.02d30ed:
* Generate predictions for update_entry
- Update to version 1+git20240905.e7ca8cf:
* Replace root=UUID= with root=device
- Update to version 1+git20240903.81f1f40:
* Generate new predictions for update_all_entries
* Use raw option in jq update all entries
- Update to version 1+git20240830.7f696c8:
* Use parameter "snapshot" instead the global one
* Add update-entry and update-all-entries commands
* Generate tpm2 public key before enroll_pcroracle
* Fix function names for enrolling pcr-oracle
* Check if enroll functions worked correctly
* Warn when pcrlock.json or tpm2-pcr-signature.json are missing
- Update to version 1+git20240829.1b5aa4d:
* Add --default-snapshot parameter (bsc#1224773)
- Update to version 1+git20240823.30ef4f1:
* Remove the executed line in grub2bls
* Support new grub2-bls package
- Update to version 1+git20240822.bc7e06b:
* Hide exit code for set-default-snapshot plugin call
- Update to version 1+git20240812.ee2298f:
* Use arg_no_reuse_initrd as update_initrd
* Reorder PIN and PW search
* fix portable installation The fallback.efi should not be added when installing in portable mode
* Use /run for tmpfiles instead of /etc
- Update to version 1+git20240722.e6d7c91:
* Fix early return value when cleaning pcrlock.d
- Update to version 1+git20240719.36c650f:
* Remove pcrlock.d if there are too many files
* Limit LAST_WORKING_SNAPSHOTS to 3
- Update to version 1+git20240718.6fbaad1:
* Enroll using pcr_oracle if pcrlock fails
* Fix loader.conf measurement
* Address some shellcheck issues
* Implement basic [un]enroll commands
* snapper: do not error if sdbootutil fails
- Update to version 1+git20240716.bb40c38:
* Add --only-default option for list-entries command
* Turn off colors when the shell it not interactive
* Support portable installation of bootloader This is useful to create portable drives, so the bootloader entry isn't created permenantly.
- Update to version 1+git20240704.a2c5a26:
* Complain if fde-tools is missing
* Remove rpm scriptlets
* Remove is_transactional check
* Call regenerate-initrd-posttrans
* Remove pcrlock files older than 1 week
* Measure initial state from backup
* Remove useless TODO comments
* Rename variable to SDB_ADD_INITIAL_COMPONENT
* Fix transactional check
* Add system / snapper as prefix for tw/grub2-bls
* Compose the entry file name in a single place
* Make 'invert' a generic case
* Make free space for new kernel / initrd
* Replace match with test in jq
* grub: add grub drive in initrd path
* grub: blscfg is included in the image
* Fix pcrlock_manual_raw call
* Add emacs .dir-locals.el
* Show success message
* Use a recovery pin for re-enrollment
* grub2: entries predictions as a single component
* grub2: remove duplicate function
* Add blscfg.mod in the ESP and update predictions
* grub2: generate pcrlock predictions
* Fix some typos
- Update to version 1+git20240514.56dc89c:
* Add show-entry command
* Add SYSTEMD_COLORS flag
* Add byte order mark to boot.csv
- Update to version 1+git20240506.573a6a4:
* Don't try to mess with overlayfs inside transaction
* .spec - requires: dialog
- Update to version 1+git20240410.3325802:
* fallback for machine-id
- Update to version 1+git20240408.49e4021:
* Update requirements
* Measure manually initrd if pcrlock fails
* Set SYSTEMD_LOG_LEVEL if verbose
* Only error out on empty machine-id when actually used
* feat: add basic boot assessment
* fix: use new os-release and machine-id files
* dracut call: --add-device belongs to --sysroot
* Make sdbootutil usable with no snapshot Systems
- Update to version 1+git20240321.04bfbac:
* Warning if make-policy do not register all PCRs
- Update to version 1+git20240320.8b35615:
* Revert "Remove GRUB2 package conflict"
- Update to version 1+git20240314.3472899:
* Add minimal grub configuration
* Add systemd.machine_id to kernel command line
* Add SNAPSHOT parameter to bootloader command
* Remove GRUB2 package conflict
* Resolve some shellcheck issues
* Remove unused variable
* Change tempfile name
* needs-update and update meets grub2
* Consider grub2 when installing the bootloader
* Add grub2 detector and command
* fix: delete correct initrd file after installation
* feat: add add-all-kernels-clean function
* refactor: use snapshot as argument for all commands
* Set SYSTEMD_LOG_LEVEL=warning for pcrlock
* Don't require /etc/sysconfig/fde-tools for pcr-oracle
* add loader.conf to locking
* Make sure there are actually entries
* Prefer pcr-oracle if it's actually configured
* Don't log to syslog ourselves
* Fix typo
* fix: remove Tumbleweed version from regular entries
- Update to version 1+git20240215.cb7e392:
* Add --no-random-seed argument
- Update to version 1+git20240214.ba81e0e:
* Fix pcr-oracle use
* Add device when generating initrd for snapshots
* Use systemd-pcrlock
* Pre-built initrd support
* Add subvolumes_prefix support
- Update to version 1+git20240122.c0d8f76:
* Integrate with kernel-install
* Rework kernel listing a bit
* Add checks to list-entries
* List entries for current system only by default
* Fall back to loader.conf if setting efivar failed
* Runtime determine kernel image name
* Add list-snapshots
* Add list-entries command
- Update to version 1+git20240118.7e744b4:
* Bind mount /etc inside the snapshot
- Update to version 1+git20231221.42797ab:
* Do not fail if LUKS2 section is empty
- Update to version 1+git20231214.b186b2d:
* Fix exit code
* Revert "Add pcr predictions to initrd for now"
- Update to version 1+git20231213.2a07af6:
* Add update-predictions command
* Predict all the entries
- Update to version 1+git20231211.01c6a76:
* Add ExclusiveArch for 64-bit EFI architectures
- Update to version 1+git20231129.d7f3909:
* Add pcr predictions to initrd for now
* Generate new TPM2 predictions with pcr-oracle
* Update file triggers
* Fix exit code of update command
* Add a %transfiletriggerin to update EFI binaries
* Update help text
- Update to version 1+git20231114.6bcf1d3:
* Fix quoting when calling dracut
- Update to version 1+git20231102.beb4c19:
* Update sdboot in snapper hook
* Install command with specific snapshot
* Install sdbootutil marker next to loader
* In t-u mode, don't call sdbootutil in rpm scriptlets
- Update to version 1+git20231026.f43c33c:
* Fix generating initrd for random snapshots
- Update to version 1+git20231023.873adb9:
* Use correct image name on aarch64
- Add changes from gh#openSUSE/sdbootutil#21:
* sdbootutil.spec: Add missing efibootmgr dependency
* sdbootutil.spec: Make sdbootutil-snapper a hard dependency
- Update to version 1+git20231005.890f70c:
* Add --no-reuse-initrd option
* Refactor boot descriptive entries
* feat: more descriptive bootmenu entries
* Remove stray set -x
* speed up snapper list
* Fix misleading comment
* Fix helptext
- Update to version 1+git20230817.2a3cd34:
* Ignore errors from efibootmgr
* Update spec file
* Add marker to flag installation using sdbootutil
* Refactor and fix boot entry installation
* Don't exit in warn()
* feat: use arg_esp_path directly
* fix: get esp_device from bootctl
* fix: only install shim for secure boot
* feat: create only non-existing entries & pass correct ESP partition
* fix: make efibootmgr silent
* feat: create boot menu entries when installed
- Update to version 1+git20230814.38973c7:
* Support purge-kernels
* Fix postun
* Remove debug logging
- Only install the snapper plugin if sdbootutil is requested
- Bypass git, owner is not available ATM
- Update to version 1+git20230727.a0e666f:
* Set and honor $SYSTEMD_ESP_PATH
* rpm-script: don't remove kernel on reinstalls
- Update to version 1+git20230726.a994d2e:
* Fix installing extra kernels in MicroOS
* Replace file triggers with scriptlet
* Fix cleanup of rollback files
* Don't install unchanged files
* Add is-bootable and list-kernels commands
* Add ARCHITECTURE.md which explains how the setup works
* Add default loader config when installed
- Update to version 1+git20230717.dac075e:
* Install default boot loader in non-secure-boot case too
- Update to version 1+git20230713.df6eaca:
* Update features
* Call stty only in interactive mode
* silence stty errors
- Update to version 1+git20230713.356f0c5:
* Fix rpm dependencies
- Update to version 1+git20230711.f5c7e48:
* Fix setting root and rootflags
- Update to version 1+git20230626.1ef6b4d:
* creating /etc/kernel directory
* Update help screen
- Update to version 1+git20230615.587e134:
* Handle out of space
- initial package
OBS-URL: https://build.opensuse.org/package/show/devel:microos/sdbootutil?expand=0&rev=141
* Shift only the matching component
* Rework free-space allocator algorithm
* Clarify when the initrd is generated
* Add the kernel version for measurement order
* Keep original prediction for pcrlock aligment
* Check array size for emptiness
* Refactor debug output
* Reclaim free space when updating entries
* spec: Update bootloader if it is recognized
* Limit variations up to 8 for a component
* Add priority field in entry list
* Make snapshot_ids ordered by importance
* Convert echo to info
* In virtual environment drop PCR0
OBS-URL: https://build.opensuse.org/package/show/devel:microos/sdbootutil?expand=0&rev=134
* Fallback to file config when bootctl fails
* Remove TODO file
* Declare local variable
* Print colors when in terminal
* Do not load the config file when variable is set
* Uset btrfs instead of snapper for set default snapshot
* Drop unused entries parameter
* Improve boot loader detection
OBS-URL: https://build.opensuse.org/package/show/devel:microos/sdbootutil?expand=0&rev=133
* Load the config file when updating the predictions
* Include swap partitions for PCR15
* Soft fails keyctl setperm when called via YaST
* Revoke cryptenroll key if is incorrect
- Update to version 1+git20250307.d46fcde:
* Add fallback logic when generatic predictions
* Don't use sdbootutil-pin when reading vk
* Drop parameters for generate_tpm2_predictions
* Fix style
* Fix --signed-policy parameter
- Update to version 1+git20250306.0811984:
* Fix list of tracked devices
* Don't echo '\n' when timeout or default entry are empty
OBS-URL: https://build.opensuse.org/package/show/devel:microos/sdbootutil?expand=0&rev=127
