v2024.2

Release 2024.2

Notable bug fixes are:

• rpm-ostree now will set the correct file capabilities by getting the actual xattr bytes: #4769
• rpm-ostree (ostree-ext) now will not remove all environment variables: ostreedev/ostree-rs-ext#583. For example this can affect proxy configuration passed via environment variables.

Colin Walters (1):
      daemon: Add a bit more error prefixing

HuijingHei (1):
      test-misc-2.sh: update checking log

Jonathan Lebon (9):
      core: Don't touch /usr/local at assembly time
      app: Tweak tmpfiles.d integration entries for `/usr/local`
      app: Split out /var/{opt,usrlocal} tmpfiles.d entries in separate dropin
      ci/prow: temporarily stop composing with new rpm-ostree
      rust/lockfile: Drop unused imports
      libpriv: Stop digging in private libcap internals
      .github: add new issue template

Joseph Marrero (2):
      Update ostree-ext to 0.12.9
      Release 2024.2


Timothée Ravier (1):
      Cargo.toml: Exclude idna/tests for vendor tarball

Full Changelog: v2024.1...v2024.2

v2024.1

This release fixes two regressions, one introduced in 2023.13
for upgrades with layered packages, and one for kernel
argument handling.

What's Changed

• build(deps): bump tokio from 1.34.0 to 1.35.1 by @dependabot in #4743
• build(deps): bump clap from 4.4.4 to 4.4.11 by @dependabot in #4742
• build(deps): bump reqwest from 0.11.20 to 0.11.23 by @dependabot in #4741
• build(deps): bump unsafe-libyaml from 0.2.8 to 0.2.10 by @dependabot in #4739
• build(deps): bump tempfile from 3.8.0 to 3.8.1 by @dependabot in #4744
• Check generated tmpfiles.d dir when removing package by @HuijingHei in #4746
• build(deps): bump futures from 0.3.28 to 0.3.30 by @dependabot in #4751
• build(deps): bump is-terminal from 0.4.9 to 0.4.10 by @dependabot in #4750
• build(deps): bump serde_json from 1.0.108 to 1.0.109 by @dependabot in #4749
• build(deps): bump cxx from 1.0.107 to 1.0.112 by @dependabot in #4748
• build(deps): bump cxx-build from 1.0.107 to 1.0.112 by @dependabot in #4747
• kargs: run delete-if-present and append-if-missing failed when there is existing key by @HuijingHei in #4738
• Release 2024.1 by @cgwalters in #4752

Full Changelog: v2023.12...v2024.1

Release 2023.12

Notable bug fixes are:

• rpm-ostree now will remove duplicate tmpfiles entries #4697
• rpm-ostree now will properly prune container layers #4720

Colin Walters (9):
      tmpfiles: Add a unit test
      tmpfiles: Rename reader function
      tmpfiles: Change `read_tmpfiles` to return a direct hashmap
      tmpfiles: Collect into a BTreeMap for reproducibility
      tmpfiles: Drop intermediate re-allocation
      composepost: Support rootfs.transient=yes
      Ensure container image layers are pruned
      tmpfiles: Fix error contexts
      tmpfiles: Handle old caches

HuijingHei (4):
      rpm-ostree-0-integration.conf: remove `/var/lib` tmpfiles entry as it is duplicated in `var.conf`
      rpmostree-postprocess.cxx: remove `var/` in unified core mode
      utils.rs: remove duplicate tmpfiles entries
      tmpfiles.rs: minor update

Full Changelog: v2023.11...v2023.12

Release 2023.11

This is a smaller release. Notable new features and bug fixes are:

• rpm-ostree now supports adding generic container configs #4701
• rpm-ostree now adds padding between dracut's initramfs and random CPIO #4683

Colin Walters (10):
      Update to ostree-ext 0.12.5
      daemon: Make one bit of C++ code compatible with f38+f39 clang-format
      ci/test-container: Drop modularity tests in F39
      ci/test-container: Update for f39
      Remove layering-modules test
      tests: Add f39 compatibility
      tests/container-build-integration: Use testing-devel
      tests: Skip tests that need the fix for https://github.com/systemd/systemd/issues/29275
      lib: Update ostree-ext
      compose: Add support for specifying image config

Hongxu Jia (2):
      correct bash completion
      src/app/libmain.cxx: correct output of rpm-ostree compose -h

Jonathan Lebon (6):
      tests/layering-fedorainfra: update bodhi/koji URLs for f39
      tests/libtest: drop BuildArch from spec file for test RPMs
      ci: bump vmcheck timeout to 1 hour
      ci: cancel previous build on PR update
      lockfile: add SRPM name in metadata field
      libpriv/kernel: Add padding between dracut initramfs and random CPIO

Joseph Marrero (1):
      Stop vendoring bootc

New Contributors

• @hongxu-jia made their first contribution in #4681

Full Changelog: v2023.10...v2023.11

Release 2023.10

This is a re-release of 2023.9 with the correct version number.

This release has a variety of smaller fixes and cleanups, plus one new opt-in new feature to ensure the SELinux labels for /usr/etc are the same as /etc, which is important for enabling "transient etc" with ostree.

• compose: Two minor cleanups by @cgwalters in #4629
• ci: Bump hardcoded Ignition version by @cgwalters in #4639
• deny: Add ring by @cgwalters in #4630
• packaging/rpm-ostree: update python3 macros and builddep by @jmarrero in #4641
• docs/handbook: Add more details about inactive overrides by @jlebon in #4642
• Bump to ostree-ext 0.12.3 by @cgwalters in #4665
• Hard require ostree 2023.7 by @cgwalters in #4672
• Ensure rofiles-fuse gets SIGTERM if we exit by @cgwalters in #4660
• ci/upgrade: disable zincati.service in config.bu by @HuijingHei in #4671
• build(deps): bump tracing from 0.1.37 to 0.1.40 by @dependabot in #4669
• treefile: Add option to label /usr/etc as /etc by @cgwalters in #4640
• libpriv/rpm-util: Query package repo checksum under lock by @jlebon in #4673

Full Changelog: v2023.8...v2023.9

Release 2023.8

The biggest feature in this release is support for
rpm-ostree upgrade --check when using a container flow;
this should unblock GUI tools like Plasma Discover and gnome-software
which want to check for updates and prompt the user for downloads.

There's a variety of other smaller bugfixes and features and internal
cleanups.

Colin Walters (32):
      daemon/search: Fix memory leaks
      Bump to containers-image-proxy 0.5.5
      search: Fix a NULL ptr deref with zero terms
      packaging: Write to target/
      ci: Add autovendor flow
      sysroot: Silence clang-analyzer warning
      pkg-builtins: Add assertions to quiet clang-analyzer
      ci/autovendor: Make it work
      cxx: Regenerate
      install/uninstall: Error out with --enablerepo on booted host
      Update to ostree-ext 0.11.6
      Remove unreferenced container images in cleanup, not rebase
      core: Print total imported
      core: Include repo name in download error
      core: Add warning when we have pkgs to download in cache-only mode
      scripts: Also ignore kernel-64k scripts
      ci: Run cosa unprivileged
      docs: Add bootc
      Pin bootc to a git tag
      lib: Update to bootc 0.1.1 (ostree-ext 0.12, cap-std-ext 3.x)
      lockfile: Port away from deprecated chrono method
      composepost: Use O_TMPFILE, not memfd
      rust: Drop dependency on `memfd`
      compose-image: Add `--initialize-mode`
      Port a few things from nix to rustix
      gitmodules: Switch to github for libglnx
      container: Make `rpmostree.inputhash` optional
      Update to ostree-ext 0.12.1
      build-sys: Hard require ostree 2023.6
      core: Add composefs digest for local commits too
      Update to ostree-ext 0.12.2
      Release 2023.8

CoreOS Bot (1):
      Sync repo templates ⚙

Jonathan Lebon (5):
      Cargo.toml: specify `nix` features to use
      core: Convert path to ostree convention when deleting
      tests/libvm.sh: Support `VMIMAGE` override
      tests/vmcheck: Add container-selinux hack in selinux override test
      libpriv/core: Tolerate rpmdb vs on-disk file type mismatch

Joseph Marrero (1):
      ci: update ignition on test-container test

Luke Yang (1):
      Add `container upgrade --check` function

dependabot[bot] (29):
      build(deps): bump openssl from 0.10.56 to 0.10.57
      build(deps): bump tokio from 1.29.1 to 1.32.0
      build(deps): bump camino from 1.1.4 to 1.1.6
      build(deps): bump serde_json from 1.0.104 to 1.0.105
      build(deps): bump rustix from 0.37.20 to 0.38.3
      build(deps): bump nix from 0.26.2 to 0.26.4
      build(deps): bump regex from 1.9.3 to 1.9.5
      build(deps): bump tempfile from 3.7.1 to 3.8.0
      build(deps): bump cxx-build from 1.0.105 to 1.0.107
      build(deps): bump libglnx from `c02eb59` to `54ad67d`
      build(deps): bump libc from 0.2.146 to 0.2.147
      build(deps): bump serde from 1.0.179 to 1.0.188
      build(deps): bump clap from 4.3.21 to 4.4.2
      build(deps): bump indicatif from 0.17.5 to 0.17.6
      build(deps): bump either from 1.8.1 to 1.9.0
      build(deps): bump chrono from 0.4.26 to 0.4.30
      build(deps): bump cxx from 1.0.105 to 1.0.107
      build(deps): bump libc from 0.2.147 to 0.2.148
      build(deps): bump rustix from 0.38.3 to 0.38.13
      build(deps): bump indoc from 2.0.3 to 2.0.4
      build(deps): bump nix from 0.26.4 to 0.27.1
      build(deps): bump anyhow from 1.0.71 to 1.0.75
      build(deps): bump libglnx from `54ad67d` to `aff1eea`
      build(deps): bump rustix from 0.38.13 to 0.38.14
      build(deps): bump serde_yaml from 0.9.21 to 0.9.25
      build(deps): bump clap from 4.4.2 to 4.4.4
      build(deps): bump rayon from 1.7.0 to 1.8.0
      build(deps): bump reqwest from 0.11.18 to 0.11.20
      build(deps): bump indicatif from 0.17.6 to 0.17.7

v2023.7

Release 2023.7

This is a bugfix release that includes:

• A bootc-lib fix for bootc-dev/bootc#112 which was breaking our builds.
• The fix for #4508 which caused segfaults when any flag was passed between the rpm-ostree command and usroverlay option.

Colin Walters (3):
      man: Describe GPG key behavior
      main: Move usroverlay parsing back to C++ consistently
      usroverlay: Pass arguments to `ostree admin unlock`

Joseph Marrero (1):
      Update bootc-lib

Full Changelog: v2023.6...v2023.7

v2023.6

v2023.6

Release 2023.6

This version of rpm-ostree contains numerous bug fixes and enhancements. Notable features are:

• rpm-ostree now supports the "search" verb allowing users to use rpm-ostree to search for available packages. An example of this is: rpm-ostree search *kernel

• We now generate composefs metadata if ostree was compiled with support for composefs

• rpm-ostree now vendors bootc, and this functionality can be accessed by creating a symlink ln -sr /usr/bin/rpm-ostree /usr/bin/bootc
  This is an experimental feature for now.

Alexander Larsson (1):
      commit: Always enable generation pf composefs metadata if possible

Colin Walters (9):
      postprocess: Use --refresh now
      container: Clarify error for nonexistent previous manifest file
      client: Add an error prefix in deployment path
      main: Update ostree-ext, add provisional-repair entrypoint
      Bump to ostree-ext 0.11.4
      Revert "main: Drop deprecated `container-encapsulate` entrypoint"
      Use cap-tempfile via cap-std-ext
      status: Fix possibly uninitialized warning
      Bump to ostree-ext 0.11.5

Eric Curtin (1):
      kernel: Specify multiple kernel or initramfs in error message

Felix Yan (1):
      docs: correct a typo in Makefile.am

Huijing Hei (4):
      sysuers: fix error if running `groupadd` with `-f`
      passwd: Rename func `data_from_json` to `write_data_from_treefile` and add comment
      passwd: sync `etc/{,g}shadow` according to `etc/{passwd,group}`
      passwd: add `enum PasswdKind`

Joseph Marrero (4):
      ci/test-container.sh: use f37 ignition for replace test
      rust/src/main.rs: Add bootc entry point
      .cci.jenkinsfile: up build pod memory to 6GB
      scripts: also ignore kernel-debug-modules.posttrans

Luke Yang (2):
      Add a `search` CLI verb and DBus API
      Add `kola` tests and fix `Name & Summary` search

Timothée Ravier (2):
      docs: Document ostree native container URL format
      packaging/spec.in: Enable rpm-ostree-countme.timer following presets

New Contributors

• @ericcurtin made their first contribution in #4494
• @felixonmars made their first contribution in #4520

Full Changelog: v2023.5...v2023.6

v2023.5

New features

rpm-ostree can now directly pull container images from containers-storage (e.g. the result of podman build):
rpm-ostree rebase ostree-unverified-image:containers-storage:localhost/mytestimage

Other changes

Adam0Brien (2):
      Add --force-replacefiles to docs/administrator-handbook.md
      Add --force-replacefile to man page

Colin Walters (13):
      daemon: Never do interactive auth for RegisterClient
      Port to clap v4
      compose: Oxidize bits propagating `core.fsync`
      compose: Also propagate ex-{fsverity,composefs}
      build-sys: Use new `tier = 2` from cargo-vendor-filterer
      compose: Adapt to composefs change with `ex-integrity` group
      tests/container-image: Revert use of automatic upgrade trigger
      core: Error out instead of aborting on reinstalls
      importer: Drop non-root files in CPIO check
      tests: Use `-p qemu` for cosa
      Bump to ostree-ext 0.11.1
      Drop isolation when fetching from containers-storage:
      deploy-from-self: Add some error prefixing

Joseph Marrero (2):
      packaging/rpm-ostree.spec.in: use SPDX license identifier
      Release 2023.5

Luke Yang (2):
      Added more override examples
      Sorted builtin commands alphabetically

RishabhSaini (2):
      Update to ostree-ext 0.20, cap-std-ext 2.0
      container: Add --previous-build-manifest

New Contributors

• @Adam0Brien made their first contribution in #4436
  &
• @lukewarmtemp made their first contribution in #4438

Full Changelog: v2023.4...v2023.5

2023.4

Probably the biggest thing here is a fix for
#4284
which affects Fedora Silverblue users.

User visible changes

• app: Add a global -q/--quiet flag by @cgwalters in #4384
• Add a "apply" (reboot) automatic update strategy by @cgwalters in #4392

Notable bugfixes

• Make output handling thread-local by @cgwalters in #4405

Other changes

• Fix typo in error log if initramfs generation fails by @plata in #4380

• rust/ffiutil: Drop dead GError code by @cgwalters in #4365

• lib: Use re-exported oci-spec from ostree-ext by @cgwalters in #4383

• tests/compose-image: Remove workaround as F38 commit reached stable by @jmarrero in #4376

• kargs: Simplify idempotent append and delete operations by @Razaloc in #4161

• scripts: Ignore kernel-redhat %posttrans scripts by @jlebon in #4386

• rust: Bump various crates && rust: Bump dependabot PR limit to 6 by @cgwalters in #4385

• upgrade: Split output lines for stored versus to-fetch by @cgwalters in #4394

• build(deps): bump serde from 1.0.160 to 1.0.162 by @dependabot in #4396

• build(deps): bump libc from 0.2.142 to 0.2.143 by @dependabot in #4395

• build(deps): bump rust-ini from 0.18.0 to 0.19.0 by @dependabot in #4397

• useradd: Add -M/--no-create-home by @cgwalters in #4399

• output: More daemon-side progress debugging by @cgwalters in #4402

• man/rpm-ostree: Document status switches by @jlebon in #4413

• client: Print when we're attaching to an existing transaction by @cgwalters in #4398

• tests: Drop ex from initramfs-etc by @cgwalters in #4406

• daemon: Add logging for invocations of non-txn methods by @cgwalters in #4404

• build(deps): bump serde from 1.0.162 to 1.0.163 by @dependabot in #4409

• tests/container: Update package fixtures to f38 by @cgwalters in #4414

• Regenerate cxx bindings by @cgwalters in #4416

• Release 2023.4 by @cgwalters in #4418

New Contributors

• @plata made their first contribution in #4380

Full Changelog: v2023.3...v2023.4