SHA256
1
0
forked from pool/python-kiwi

- Bump version: 9.24.33 → 9.24.34

- Follow up fix for isolinux-config
  isolinux-config is called to update the search path inside
  of the isolinux binary. isolinux/syslinux is exclusive to
  the ix86 architecture and to BIOS firmware. Therefore the
  condition to actually call it should reflect this.

- Bump version: 9.24.32 → 9.24.33

- Fixed runtime check
  Fixed check_dracut_module_for_disk_overlay_in_package_list. The
  check complains if the dracut-kiwi-overlay module is not installed
  but overlay support was requested. This is correct but should only
  be done if the selected initrd system is dracut.

- Add option to set LUKS type to luks1 (#2126)
  Add option to set LUKS type to luks1
  So far the LUKS type could be set to luks and luks2. However, what luks
  version the value 'luks' evaluates to depends on how the distributor has
  packaged luks. Thus it's possible that 'luks' is either luks1 or luks2. To
  also have the opportunity to explicitly specify luks1 this commit adds
  the opportunity in the schema.

- Update devel packages helper
  Added trang as needed when working on the schema

- Add support for dm integrity with secret key
  Allow to protect the opening of the integrity data map and
  journal through a keyfile. For setting the key file two new

OBS-URL: https://build.opensuse.org/package/show/Virtualization:Appliances:Builder/python-kiwi?expand=0&rev=216
This commit is contained in:
Marcus Schäfer 2022-05-07 07:09:32 +00:00 committed by Git OBS Bridge
parent b973cbbca4
commit 305e58ed17
4 changed files with 208 additions and 5 deletions

View File

@ -3,7 +3,7 @@
pkgname=('python-kiwi' 'kiwi-man-pages' 'dracut-kiwi-lib' 'dracut-kiwi-oem-repart' 'dracut-kiwi-oem-dump' 'dracut-kiwi-live' 'dracut-kiwi-overlay')
arch=(x86_64)
pkgver=9.24.31
pkgver=9.24.34
pkgrel=0
pkgdesc="KIWI - Appliance Builder Next Generation"
url="https://github.com/SUSE/kiwi/tarball/master"
@ -12,7 +12,7 @@ makedepends=(python-setuptools gcc shadow grep)
provides=(kiwi-ng kiwi)
source=("${pkgname}.tar.gz")
changelog="${pkgname}.changes"
md5sums=('e91a5ecdb06eea3ce9a4576fd9b8058c')
md5sums=('fb79f2cde6dac28f1c6b71ddc59ae4bb')
build() {

View File

@ -1,3 +1,206 @@
-------------------------------------------------------------------
Sat May 07 08:58:42 CEST 2022 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Bump version: 9.24.33 → 9.24.34
-------------------------------------------------------------------
Thu May 05 17:40:00 CEST 2022 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Follow up fix for isolinux-config
isolinux-config is called to update the search path inside
of the isolinux binary. isolinux/syslinux is exclusive to
the ix86 architecture and to BIOS firmware. Therefore the
condition to actually call it should reflect this.
-------------------------------------------------------------------
Thu May 05 17:05:56 CEST 2022 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Bump version: 9.24.32 → 9.24.33
-------------------------------------------------------------------
Thu May 05 09:37:08 CEST 2022 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Fixed runtime check
Fixed check_dracut_module_for_disk_overlay_in_package_list. The
check complains if the dracut-kiwi-overlay module is not installed
but overlay support was requested. This is correct but should only
be done if the selected initrd system is dracut.
-------------------------------------------------------------------
Wed May 04 15:28:57 CEST 2022 - ozboss <32305849+ozboss@users.noreply.github.com>
- Add option to set LUKS type to luks1 (#2126)
Add option to set LUKS type to luks1
So far the LUKS type could be set to luks and luks2. However, what luks
version the value 'luks' evaluates to depends on how the distributor has
packaged luks. Thus it's possible that 'luks' is either luks1 or luks2. To
also have the opportunity to explicitly specify luks1 this commit adds
the opportunity in the schema.
-------------------------------------------------------------------
Wed May 04 09:29:00 CEST 2022 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Update devel packages helper
Added trang as needed when working on the schema
-------------------------------------------------------------------
Fri Apr 29 14:38:13 CEST 2022 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Add support for dm integrity with secret key
Allow to protect the opening of the integrity data map and
journal through a keyfile. For setting the key file two new
optional type attributes were added:
* integrity_keyfile
* integrity_metadata_key_description
The key file format must be correct according to the selected
integrity algorithm. As of now the kiwi default hmac-sha256
algorithm is used with the selected keyfile
The optional integrity_metadata_key_description attribute
allows to specify a custom description of an integrity key
as it is expected to be present in the kernel keyring. The
information is placed in the integrity metadata block. If
not specified kiwi creates a key argument string instead
which is based on the given integrity_keyfile filename.
The format of this key argument is:
:BASENAME_OF_integrity_keyfile_WITHOUT_FILE_EXTENSION
-------------------------------------------------------------------
Thu Apr 28 15:40:31 CEST 2022 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Update get_disksize_mbytes to support clones
When using partition clones the pre-calculation of the
disk size needs to take this into account.
-------------------------------------------------------------------
Wed Apr 27 22:22:17 CEST 2022 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Fixed UUID setup for XFS
Make sure the log got replayed prior generating a new UUID
-------------------------------------------------------------------
Tue Apr 26 21:04:39 CEST 2022 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Fixed scope of setup_isolinux_boot_path
There is a method called setup_isolinux_boot_path which is
encoded in the Iso class. The method allows to change the
boot path in the isolinux binary and makes sense when the
bootloader is selected to be isolinux. However, the method
was called in the scope of the FileSystemIsoFs class which
responsibility is to create an ISO filesystem. The creation
of an ISO filesystem has no direct connection to a bootloader.
Thus calling this method in the scope of the FileSystemIsoFs
implementation is wrong and can lead to unexpected side
effects. This commit moves the call of the method to the
places where isolinux as a bootloader can still be used.
This Fixes #2117
-------------------------------------------------------------------
Tue Apr 26 09:32:43 CEST 2022 - Dan Čermák <dcermak@suse.com>
- Correct the URL to the dracut home page
This fixes https://github.com/OSInside/kiwi/issues/2097
-------------------------------------------------------------------
Tue Apr 26 09:18:30 CEST 2022 - Dan Čermák <dcermak@suse.com>
- Change the custom vagrant config file to 00-vagrant.conf
If it is called 99-vagrant.conf, then anything "before" that, like
50-redhat.conf takes precedence and overrides our custom settings.
-------------------------------------------------------------------
Tue Apr 26 09:18:09 CEST 2022 - Dan Čermák <dcermak@suse.com>
- Add Leap 15.4, SLE 15 SP4 & CentOS Stream 9 to the scripts tests
-------------------------------------------------------------------
Mon Apr 25 17:15:06 CEST 2022 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Bump version: 9.24.31 → 9.24.32
-------------------------------------------------------------------
Mon Apr 11 21:40:59 CEST 2022 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Add support for standalone dm integrity
There is support in kiwi to use dm_integrity in combination
with the LUKS header and dm_crypt. However there is also the
use case to setup dm_integrity in standalone mode. This commit
allows to create the dm_integrity layer outside of LUKS using
/etc/integritytab to activate the map through a systemd
generator if systemd is used.
Regarding systemd it's required to use a version of system which
provides: system-generators/systemd-integritysetup-generator.
If this generator does not exist in the distribution it will
also be missing in the dracut generated initrd and the boot
will not be able to succeed. It's mentioned here because even
newer distributions might be missing the generator
Along with the implementation there are two new optional
attributes in the <type> section:
standalone_integrity="true|false"
embed_integrity_metadata="true|false"
standalone_integrity activates/deactivates the dm_integrity map
on top of the root filesystem. Similar to the veritysetup support
there is the opportunity to create an embedded magic metadata
block at the end of the device containing the root
filesystem via embed_integrity_metadata
-------------------------------------------------------------------
Sun Apr 10 19:33:35 CEST 2022 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Update per codacy smell
-------------------------------------------------------------------
Sun Apr 10 16:52:05 CEST 2022 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Add support for part clones to the Disk interface
The Disk class provides methods to create partition(s)
and map names according to its scope and independent of
the actual partition tools. For example: create_root_partition().
This commit adds an additional optional clone parameter to
all methods for which we want to allow partition clones
-------------------------------------------------------------------
Sun Apr 10 15:25:37 CEST 2022 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Be less strict in boot link to itself
As part of the grub setup a link named 'boot' inside of
/boot is created pointing to itself 'boot -> .'. The reason
is to allow the bootloader config to find its files referenced as
/boot/something independently if /boot is placed into an extra
partition. However if an extra boot partition is used and a
filesystem which does not support symlinks, e.g fat, that
symlink creation should not lead to an error in the image build
process as it is considered an optional safe link and not a
mandatory pre-requisite
-------------------------------------------------------------------
Thu Apr 07 09:39:54 CEST 2022 - Marcus Schäfer <marcus.schaefer@gmail.com>
- Fixed TW arm rpi integration test
Explicitly add ruby to the package list
-------------------------------------------------------------------
Wed Apr 06 16:39:44 CEST 2022 - Marcus Schäfer <marcus.schaefer@gmail.com>

View File

@ -43,7 +43,7 @@
%endif
Name: python-kiwi
Version: 9.24.31
Version: 9.24.34
Provides: kiwi-schema = 7.5
Release: 0
Url: https://github.com/OSInside/kiwi

View File

@ -1,3 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:9e2e337a9bed3009deef79cc9055126ce09afbcd07eb81cbcb54962782456fa3
size 2153767
oid sha256:239db166b233f47c5730db04f18fe7907eba86446c1512de1bb74eb38cd809b4
size 2165913