From cf182065130b7dc7f76a9258f049ce573c7830f8ad9c33dc3e03fb4c7dd53125 Mon Sep 17 00:00:00 2001 From: Marcus Schaefer Date: Tue, 20 Aug 2019 15:22:10 +0000 Subject: [PATCH] =?UTF-8?q?-=20Bump=20version:=209.18.11=20=C3=A2=E2=80=A0?= =?UTF-8?q?=E2=80=99=209.18.12?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit - Added MicroOS integration test The future technologies team is implementing a coreOS derivate based on btrfs and some overlay technology. For supporting them some changes were required in kiwi and thus we should add an integration test build which makes use of this features. - Add required cryptomount coding for EFI boot For non EFI boot grub2-install has code which gets activated through the GRUB_ENABLE_CRYPTODISK setting. However for the EFI boot case no installation of boot code is needed and therefore the grub earlyboot script has to run cryptomount - Add /mnt to list of protected paths On recursive removal make sure /mnt belong to the protected elements. This Fixes #1170 - Added full encrypted image build test - Extended LUKS encryption support We supported luks encrypted images with the exception of the boot partition because grub was not able to read from an encrypted device at that time. Since some time grub is able to read from an encrypted partition and this commit add support for it. With this patch luks encrypted images will no longer create an extra boot partition and the entire system will be encrypted. The opening of the luks container happens on the grub level only once. Customers can still specify to use an unencrypted extra boot partition with the OBS-URL: https://build.opensuse.org/package/show/Virtualization:Appliances:Builder/python-kiwi?expand=0&rev=147 --- python-kiwi.changes | 111 ++++++++++++++++++++++++++++++++++++++++++++ python-kiwi.spec | 2 +- python-kiwi.tar.gz | 4 +- 3 files changed, 114 insertions(+), 3 deletions(-) diff --git a/python-kiwi.changes b/python-kiwi.changes index 5462646..4e93637 100644 --- a/python-kiwi.changes +++ b/python-kiwi.changes @@ -1,3 +1,114 @@ +------------------------------------------------------------------- +Tue Aug 20 09:48:00 CEST 2019 - Marcus Schäfer + +- Bump version: 9.18.11 → 9.18.12 + +------------------------------------------------------------------- +Mon Aug 19 18:33:50 CEST 2019 - Marcus Schäfer + +- Added MicroOS integration test + + The future technologies team is implementing a coreOS derivate + based on btrfs and some overlay technology. For supporting them + some changes were required in kiwi and thus we should add an + integration test build which makes use of this features. + +------------------------------------------------------------------- +Mon Aug 19 18:28:46 CEST 2019 - Marcus Schäfer + +- Add required cryptomount coding for EFI boot + + For non EFI boot grub2-install has code which gets activated + through the GRUB_ENABLE_CRYPTODISK setting. However for the + EFI boot case no installation of boot code is needed and + therefore the grub earlyboot script has to run cryptomount + +------------------------------------------------------------------- +Mon Aug 19 14:34:08 CEST 2019 - Marcus Schäfer + +- Add /mnt to list of protected paths + + On recursive removal make sure /mnt belong to the protected + elements. This Fixes #1170 + +------------------------------------------------------------------- +Mon Aug 19 11:17:35 CEST 2019 - Marcus Schäfer + +- Added full encrypted image build test + +------------------------------------------------------------------- +Fri Aug 16 17:49:09 CEST 2019 - Marcus Schäfer + +- Extended LUKS encryption support + + We supported luks encrypted images with the exception of the + boot partition because grub was not able to read from an + encrypted device at that time. Since some time grub is able + to read from an encrypted partition and this commit add + support for it. With this patch luks encrypted images will + no longer create an extra boot partition and the entire + system will be encrypted. The opening of the luks container + happens on the grub level only once. Customers can still + specify to use an unencrypted extra boot partition with the + bootpartition="true" flag. In this case the opening of the + luks containers happens on the systemd level as before. + This is related to Issue #1162 + +------------------------------------------------------------------- +Thu Aug 15 09:52:27 CEST 2019 - Stefan Seyfried + +- remove '-z' option from rsync local copy calls + + rsync's "compress" option just does not make any sense when rsync is + used to copy files locally, it only increases CPU usage and slows down + the process ;-) + +------------------------------------------------------------------- +Wed Aug 14 14:45:13 CEST 2019 - Marcus Schäfer + +- Delete SuSEfirewall2 from test builds + + The package seems to be no longer present on suse + +------------------------------------------------------------------- +Wed Aug 14 12:01:34 CEST 2019 - Marcus Schäfer + +- Bump version: 9.18.10 → 9.18.11 + +------------------------------------------------------------------- +Mon Aug 12 18:17:02 CEST 2019 - Marcus Schäfer + +- Allow dracut initrd to be used with pxe type + + The pxe image type builds a simple filesystem image plus a + custom initrd. That initrd is usually build from the kiwi + netboot image descriptions which implements a workflow to + fetch the filesystem image and deploy it as rootfs for a + pxe client. User who wants to implement their own handling + of the rootfs image in e.g a custom dracut module were not + able to build this image type because we did not allow + the initrd_system attribute for the pxe type + +------------------------------------------------------------------- +Mon Aug 12 10:53:08 CEST 2019 - Marcus Schäfer + +- Use message variable for long message text + +------------------------------------------------------------------- +Mon Aug 12 10:42:11 CEST 2019 - Marcus Schäfer + +- Fixed handling of bool values in initrd code + + Some values evaluated in the initrd code are created in + the kiwi builder and passed in as a profile file. bool + values created by kiwi for use in shell scripts takes + the string 'true' or 'false' or are not set at all if not + specified in the kiwi XML description. Some code paths + in the initrd code uses the '-n' switch to check for bool + values, however if the string 'false' is passed '-n' will + do the wrong thing. Therefore a method for the initrd + code has been introduced to clearly handle bool values + ------------------------------------------------------------------- Mon Aug 05 09:55:02 CEST 2019 - David Cassany diff --git a/python-kiwi.spec b/python-kiwi.spec index 3056c2a..f67effb 100644 --- a/python-kiwi.spec +++ b/python-kiwi.spec @@ -43,7 +43,7 @@ %endif Name: python-kiwi -Version: 9.18.10 +Version: 9.18.12 Provides: kiwi-schema = 7.1 Release: 0 Url: https://github.com/SUSE/kiwi diff --git a/python-kiwi.tar.gz b/python-kiwi.tar.gz index 78fb790..2efe0b1 100644 --- a/python-kiwi.tar.gz +++ b/python-kiwi.tar.gz @@ -1,3 +1,3 @@ version https://git-lfs.github.com/spec/v1 -oid sha256:abbadafed91d1d882a815072de52294af90171e788d33194dad3b1b757c75876 -size 1609429 +oid sha256:d1caaee90db4a38f94be782c5714021eb610aa3e2a28a31a629c66e0cfeb84d3 +size 1622420